Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj7r-cv36-mxr3

Опубликовано: 06 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

EPSS

Процентиль: 36%
0.00416
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-94
CWE-99

Связанные уязвимости

CVSS3: 4.7
ubuntu
почти 2 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

CVSS3: 4.7
nvd
почти 2 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

CVSS3: 4.7
debian
почти 2 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ...

CVSS3: 4.7
fstec
почти 3 года назад

Уязвимость мультимедийной библиотеки FFmpeg, связанная с неправильным контролем идентификаторов ресурсов, позволяющая нарушителю получить доступ к конфиденциальным данным

suse-cvrf
10 месяцев назад

Security update for ffmpeg-4

EPSS

Процентиль: 36%
0.00416
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-94
CWE-99