File Extension Bypass Vulnerability in FFmpeg's HLS Demuxer
CVE-2023-6601

4.7MEDIUM

Key Information:

Status
Vendor
CVE Published:
6 January 2025

What is CVE-2023-6601?

A flaw in FFmpeg’s HLS demuxer allows attackers to bypass unsafe file extension checks. This can lead to the execution of arbitrary demuxers when specific base64-encoded data URIs are used with manipulated file extensions, potentially compromising the integrity of systems using this media processing library.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://bugzilla.redhat.com/show_bug.cgi?id=2253172
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.