Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-6605

Ffmpeg: dash playlist ssrf vulnerability in ffmpeg

Description

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FFmpeg

Default version status: unknown

  • 2.0 to < 6.*affected

References