CVE-2023-6601

Summary

CVE-2023-6601 is a newly identified vulnerability affecting FFmpeg's HLS demuxer. This flaw enables bypassing the application's unsafe file extension checks, permitting the triggering of arbitrary demuxers through base64-encoded data URIs appended with specific file extensions. Exploitation of this vulnerability could lead to potential security risks and unintended data processing. Users are strongly encouraged to update their FFmpeg installations as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.