Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size
    variable in the read_vlc_prefix() function. (CVE-2023-46407)

  - Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60
    allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of
    service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c (CVE-2023-47470)

ID	Name	Product	Family	Severity
426156	Alpine: multiple ffmpeg packages: security update to 6.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426156	Alpine: multiple ffmpeg packages: security update to 6.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
408176	Alpine: multiple ffmpeg packages: security update to 6.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408176	Alpine: multiple ffmpeg packages: security update to 6.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2023-47470

high

Tenable Plugins

high

high

high

high