CVE-2023-49528: Buffer Overflow
Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (DoS) via the afdialoguenhance.c:261:5 in the destereo component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ffmpegto a version that resolves this vulnerability.Fixed in 7:6.0-6ubuntu1.1 - Upgrade
Upgrade
ubuntu/ffmpegto a version that resolves this vulnerability.Fixed in 7:6.1.1-3ubuntu5+ - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.6-0+deb11u1Fixed in 7:4.3.7-0+deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49528?
CVE-2023-49528 is a high-severity vulnerability due to its potential for arbitrary code execution and denial of service.
How do I fix CVE-2023-49528?
To fix CVE-2023-49528, upgrade to the patched versions of FFmpeg specified for your distribution, such as 7:6.0-6ubuntu1.1 for Ubuntu.
What software is affected by CVE-2023-49528?
CVE-2023-49528 affects FFmpeg versions n6.1-3-g466799d4f5 and earlier, particularly on Ubuntu and Debian systems.
Who is vulnerable to CVE-2023-49528?
Local attackers on systems running vulnerable versions of FFmpeg can exploit CVE-2023-49528.
What type of vulnerability is CVE-2023-49528?
CVE-2023-49528 is classified as a buffer overflow vulnerability affecting the de_stereo component of FFmpeg.