CVE-2023-6604CWE-99

Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

Medium · published January 6, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.3th percentile
Weakness
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
Published
2025-01-06T16:41Z
EPSS history
Timeline
  • 06 JAN 16:41Z
    Ffmpeg: hls xbin demuxer dos amplification in ffmpeg
    cvelistv5