alpine · CVE-2023-50007

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2023-50007: 1 source package rows (ffmpeg); 23 state rows across 2 repos (3.22-community, edge-community); fixed 1, open 22.

Description:

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/samplefmt.c:260:9 component.