CVE-2023-51797
Fixed in a distro release EPSS <1%CVSS 6.7
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:722:24 in showwaves_filter_frame
Products: FFMPEG
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | ffmpeg-6 | 0 |
| Chainguard | ffmpeg-7 | 7.1.3-r2 |
| Chainguard | ffmpeg-7.1 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavdevice61 | 7.1.5-r2 |
| Chainguard | ffmpeg-7.1-libswscale8 | 7.1.5-r2 |
| Chainguard | ffmpeg-8.0 | 8.0.1-r2 |
| Debian 13 | ffmpeg | 7:7.0.1-3 |
| Debian 14 | ffmpeg | 7:7.0.1-3 |
| Ubuntu Pro 14.04 LTS | libav | no fix |
| Wolfi | ffmpeg-7 | 7.1.3-r2 |
| Wolfi | ffmpeg-7.1 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavdevice61 | 7.1.5-r2 |
| Wolfi | ffmpeg-7.1-libswscale8 | 7.1.5-r2 |
| Wolfi | ffmpeg-8.0 | 8.0.1-r2 |