DSA-5394: -1 ffmpeg -- security update

Published Apr 30, 2023

Updated

ffmpeg - security update

Other sources

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.

Affected Software

2 affected components

debian/ffmpeg

Event History

Apr 30, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What systems are realistically exposed to this issue?

Systems using the Debian ffmpeg package are exposed when they process malformed multimedia files or streams. The impact may include denial of service or potentially arbitrary code execution.

What does an attacker need to exploit the vulnerabilities?

An attacker needs to cause FFmpeg to process a malformed file or stream. The provided information does not specify whether authentication, user interaction, or a particular delivery method is required.

DSA-5394: -1 ffmpeg -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What systems are realistically exposed to this issue?

What does an attacker need to exploit the vulnerabilities?

Company

Resources

Contact

Frequently Asked Questions

What systems are realistically exposed to this issue?

What does an attacker need to exploit the vulnerabilities?