HomeFfmpegCVE-2023-49502

CVE-2023-49502

HIGH
8.8CVSS
Published: 2024-04-19
Updated: 2025-11-04
AI Analysis

Description

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.

CVSS Metrics

Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
network
Complexity
low
Privileges
none
User Action
required
Scope
unchanged
Confidentiality
high
Integrity
high
Availability
high
Weaknesses
CWE-120

Metadata

Primary Vendor
FFMPEG
Published
4/19/2024
Last Modified
11/4/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ffmpeg : ffmpegfedoraproject : fedorafedoraproject : fedorafedoraproject : fedora

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief

CVE-CVE-2023-49502 | HIGH Severity | CVEDatabase.com | CVEDatabase.com