HomeFfmpegCVE-2023-49528

CVE-2023-49528

HIGH
8.0CVSS
Published: 2024-04-12
Updated: 2025-11-04
AI Analysis

Description

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (DoS) via the af_dialoguenhance.c:261:5 in the de_stereo component.

CVSS Metrics

Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Attack Vector
local
Complexity
low
Privileges
none
User Action
none
Scope
unchanged
Confidentiality
low
Integrity
high
Availability
high
Weaknesses
CWE-122

Metadata

Primary Vendor
FFMPEG
Published
4/12/2024
Last Modified
11/4/2025
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ffmpeg : ffmpegfedoraproject : fedorafedoraproject : fedorafedoraproject : fedora

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief

CVE-CVE-2023-49528 | HIGH Severity | CVEDatabase.com | CVEDatabase.com