Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2023-6601

Ffmpeg: hls unsafe file extension bypass in ffmpeg

Description

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FFmpeg

Default version status: unknown

  • 2.0 to < 6.*affected

References