CVE-2023-51797: Buffer Overflow

Published Apr 19, 2024

Updated

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avfshowwaves.c:722:24 in showwavesfilterframe

Affected Software

17 affected components

FFmpeg FFmpeg

FFmpeg FFmpeg=7.0

FFmpeg FFmpeg=7.0.1

FFmpeg FFmpeg=7.0.2

FFmpeg FFmpeg=7.0.3

FFmpeg FFmpeg=7.1

FFmpeg FFmpeg=7.1-dev

FFmpeg FFmpeg=7.1.1

FFmpeg FFmpeg=7.1.2

FFmpeg FFmpeg=7.1.3

FFmpeg FFmpeg=7.2-dev

FFmpeg FFmpeg=8.0

FFmpeg FFmpeg=8.0.1

FFmpeg FFmpeg=8.1-dev

Fedoraproject Fedora=38

Fedoraproject Fedora=39

Fedoraproject Fedora=40

Event History

Apr 19, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-51797?

CVE-2023-51797 is classified as a high-severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2023-51797?

To fix CVE-2023-51797, upgrade to the latest version of FFmpeg that includes the patch addressing this buffer overflow vulnerability.

Who is affected by CVE-2023-51797?

CVE-2023-51797 affects local users of FFmpeg versions prior to the patch release that addresses this vulnerability.

What type of vulnerability is CVE-2023-51797?

CVE-2023-51797 is a buffer overflow vulnerability specifically found in the showwaves_filter_frame function in FFmpeg.

Can CVE-2023-51797 be exploited remotely?

CVE-2023-51797 cannot be exploited remotely as it requires local access to the system running the vulnerable FFmpeg software.