CVE-2023-6604

5.3 mediumEPSS 0.5%

Medium (5.3) in ffmpeg ffmpeg. EPSS 0.5% chance of exploitation in the next 30 days.

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs: CWE-99, CWE-94
Published: 2025-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ffmpeg:ffmpeg

References

https://bugzilla.redhat.com/show_bug.cgi?id=2334337
https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html

Check your stack JSON