CVE-2023-47470

HIGH

Ffmpeg - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0112
EPSS Percentile 78.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
ffmpeg/ffmpeg 6.1
Published Nov 16, 2023
Tracked Since Feb 18, 2026