PT-2025-1563 · FFmpeg+1 · Ffmpeg+1

Harvey Phillips · Published 2023-12-01 · Updated 2025-11-21 · CVE-2023-6604

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions FFmpeg (affected versions not specified)

Description A flaw was found in FFmpeg, allowing unexpected additional CPU load and storage consumption. This can lead to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Code Injection

Weakness Enumeration

CWE-94

CWE-99

Related Identifiers

BDU:2026-02729

CVE-2023-6604

DLA-4241-1

DSA-5985-1

MGASA-2025-0306

Affected Products

Debian

Ffmpeg

References · 24

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2334337 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6604 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02729 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-6604 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0306.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-6604 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6604 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-6604 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0306 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5985-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6604 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6604 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4241-1 · Vendor Advisory
• https://github.com/FFmpeg/FFmpeg/commit/b753bac08f6881b2d3dea8f1ab84c81550f35897 · Note