CVE-2023-6879

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 27, 2023
Updated: Feb 2, 2024
CWE ID 787
CWE ID 20

Summary

CVE-2023-6879 is a critical vulnerability that affects multiple products, including s5UiSY, sg8948, sg8949, and others. The vulnerability occurs when increasing the resolution of video frames during a multi-threaded encode, leading to a heap overflow in av1_loop_restoration_dealloc(). The risk score for this vulnerability is 68 out of 100. It has a base severity rating of CRITICAL, with high impacts on both integrity and confidentiality. The exploitability score is 3.9 out of 10. Remediation steps have not been provided in the available information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6879 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options