CVE-2023-49502

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.54% chance of exploitation in the next 30 days, 73th percentile

Published

2024-04-19

Updated

2025-11-04

Proof-of-concept exploits (1)

• https://trac.ffmpeg.org/ticket/10688

References

• CVE Record
• NVD entry

Related

• CVE-2023-49501
• CVE-2023-49528
• CVE-2023-4950
• CVE-2023-49539
• CVE-2023-49494
• CVE-2023-49540