Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-6603

Ffmpeg: null pointer dereference in ffmpeg hls parsing

Description

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FFmpeg

Default version status: unknown

  • 3.0 to < 5.*affected

References