suse · CVE-2023-50008

Quick triage

参照： Official suse advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2023-50008 severity important: SUSE including 99 source package names (ffmpeg, ffmpeg-4, …), 368 product×package rows across 20 product lines (SUSE Enterprise Storage 7.1, SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS, … (20 product lines)): Known Not Affected 317, Fixed 51.

Description:

FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component.