CVE-2023-6605
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Jan 6, 2025
CWE ID 99
Summary
CVE-2023-6605 is a newly identified vulnerability affecting FFmpeg's DASH playlist support. Maliciously crafted DASH playlists can exploit this flaw, enabling arbitrary HTTP GET requests from the machine running FFmpeg. Attackers can potentially use this vulnerability to gain unauthorized access to sensitive information or even execute malicious code. System administrators are advised to update FFmpeg as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.