CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

Score

CVSS 3.1 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2024-12-31

Last modified

2025-11-03

Weaknesses

CWE-99

Affected products

• Ffmpeg (Ffmpeg)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2334338
• https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html