Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-6602

Ffmpeg: improper handling of input format in tty demuxer of ffmpeg

Description

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FFmpeg

Default version status: unknown

  • 2.0 to < 6.*affected

References