CVE-2023-49501

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.

CVSS v3.1

8.0 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

EPSS

0.39% chance of exploitation in the next 30 days, 32th percentile

Published

2024-04-19

Updated

2025-11-04

Proof-of-concept exploits (2)

• https://trac.ffmpeg.org/ticket/10686
• https://trac.ffmpeg.org/ticket/10686#no1

References

• CVE Record
• NVD entry

Related

• CVE-2023-4950
• CVE-2023-49502
• CVE-2023-49494
• CVE-2023-49528
• CVE-2023-49493
• CVE-2023-49539