CVE-2023-46407

    Dashboard / Vulnerabilities / CVE-2023-46407

    CVE-2023-46407

    Published: 27 Oct 2023Last Modified: 28 Oct 2026

    Summary:

    Details: FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.

    References: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/, https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46407.json, https://nvd.nist.gov/vuln/detail/CVE-2023-46407, https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 47ac3e60653da651dfa064b649d0ac297560d8d5
    Fixed -None

    Affected versions

    6.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-46407 | CVE-DB