CVE-2023-6601

Medium

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary…

fedora·CWE-99·Published 2025-01-06

CVSS

4.7

EPSS

0.00

KEV

Exploits

cve.orgen

209 chars

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

NVDen

209 chars

NVDes

253 chars

Se encontró un fallo en FFmpeg's HLS demuxer. Esta vulnerabilidad permite eludir controles de extensión de archivos no seguros y activar demuxers arbitrarios a través de URL de datos codificados en base64 con extensiones de archivo específicas adjuntas.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	4.7	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	4.7	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	4.7	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N