CVE-2023-6604

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-99
View all →

Vulnerability Description

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Related Vulnerabilities

CVE-2023-6602

MEDIUM
CVSS:5.3(Medium)

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

CWE-992023

CVE-2024-7658

MEDIUM
CVSS:5.3(Medium)

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper...

CWE-992024

CVE-2023-6601

MEDIUM
CVSS:4.7(Medium)

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file ex...

CWE-992023

CVE-2019-1860

MEDIUM
CVSS:5.9(Medium)

A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user&rsqu...

CWE-992019

CVE-2024-7437

MEDIUM
CVSS:4.3(Medium)

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the com...

CWE-992024

CVE-2024-7438

MEDIUM
CVSS:4.3(Medium)

A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=show...

CWE-992024