CVE-2023-50010 | THREATINT

Description

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component.

Reserved 2023-12-04 | Published 2024-04-19 | Updated 2025-06-09 | Assigner mitre

References

ffmpeg.org/

trac.ffmpeg.org/ticket/10702

lists.fedoraproject.org/...LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ (FEDORA-2024-92780a83f9) vendor-advisory

lists.fedoraproject.org/...IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ (FEDORA-2024-55e7e839f1) vendor-advisory

lists.fedoraproject.org/...6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ (FEDORA-2024-3a548f46a8) vendor-advisory

github.com/...ommit/e809c23786fe297797198a7b9f5d3392d581daf1

github.com/...ommit/e4d2666bdc3dbd177a81bbf428654a5f2fa3787a

git.ffmpeg.org/...28654a5f2fa3787a:/libavfilter/vf_gradfun.c

cve.org (CVE-2023-50010)

nvd.nist.gov (CVE-2023-50010)

Download JSON