medium4.7
CVE-2023-6601
A flaw was found in FFmpeg's HLS demuxer.
Impact
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ffmpeg | Ffmpeg | from 2.0 through 6.0 |