All vulnerabilities

Servers and applications

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Severity
Medium 5.3
Published
6 Jan 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
FFmpegServers and applications · cpe:a:ffmpeg:ffmpeg
  • From 2.0 up to 6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-6604
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-6604