Denial of Service Vulnerability in FFmpeg HLS Playlist Parsing

CVE-2023-6603

Summary

A vulnerability exists within FFmpeg's HLS playlist parsing mechanism that allows a specially crafted HLS playlist to cause a denial of service. This occurs through a null pointer dereference during the initialization process, which can be exploited by malicious users to disrupt the functionality of applications utilizing this feature. Users are recommended to apply the latest security patches to mitigate this issue, ensuring continued protection against potential exploitation.

References