critical9.8
CVE-2023-39018
FFmpeg discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>
Impact
## Withdrawn This advisory has been withdrawn because it has been found to be disputed. Please see the issue [here](https://github.com/bramp/ffmpeg-cli-wrapper/issues/291) for more information. ## Original Despcription FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>. This vulnerability is exploited via passing an unchecked argument.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.bramp.ffmpeg:ffmpeg | <= 0.7.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bramp | Ffmpeg-Cli-Wrapper | through 0.7.0 |