CVE-2023-50009: Buffer Overflow
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component.
Other sources
FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50009?
CVE-2023-50009 is classified as a critical vulnerability due to its potential to allow local attackers to execute arbitrary code.
How do I fix CVE-2023-50009?
To remediate CVE-2023-50009, upgrade your ffmpeg package to version 7:6.0-6ubuntu1.1 or later if you are using Ubuntu.
Which versions of FFmpeg are affected by CVE-2023-50009?
CVE-2023-50009 affects FFmpeg versions up to 7:6.1-3-g466799d4f5.
Can CVE-2023-50009 be exploited remotely?
CVE-2023-50009 specifically requires local access, meaning it cannot be exploited remotely.
What components of FFmpeg does CVE-2023-50009 impact?
CVE-2023-50009 impacts the ff_gaussian_blur_8 function in the libavfilter component.