Name: CVE-2023-50010: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2024-04-19T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-50010, CWE-120, CVSS 7.8, EPSS 0.00479

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade ffmpeg	Jun 17, 2024	Apr 19, 2024
Ffmpeg	—	Upgrade to FFmpeg version 7.0	Jun 5, 2025	Apr 19, 2024
Suse	—	Upgrade libavdevice58_13-32bitUpgrade libavutil56_70Upgrade libavformat58_76-32bitUpgrade libavutil55Upgrade libavdevice-develUpgrade ffmpeg-4-private-develUpgrade libavformat57-32bitUpgrade ffmpeg-4-libswscale-develUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavformat-develUpgrade libavfilter6Upgrade libavresample4_0Upgrade ffmpeg-4-libavdevice-develUpgrade libavcodec-develUpgrade libavfilter7_110-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libavresample4_0-32bitUpgrade libavcodec57-32bitUpgrade ffmpeg-4Upgrade libavcodec58_134Upgrade libswresample2-32bitUpgrade ffmpeg-4-libavresample-develUpgrade libavfilter6-32bitUpgrade libavutil56_70-32bitUpgrade libswresample3_9Upgrade libavformat57Upgrade libpostproc-develUpgrade libavutil-develUpgrade libswresample-develUpgrade libswscale4Upgrade libswresample3_9-32bitUpgrade libpostproc55_9Upgrade libavdevice57Upgrade libpostproc54-32bitUpgrade libavresample3-32bitUpgrade libavdevice57-32bitUpgrade libavfilter7_110Upgrade libavdevice58_13Upgrade libavresample-develUpgrade libpostproc54Upgrade libswscale5_9-32bitUpgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libavutil-develUpgrade libavresample3Upgrade ffmpeg-4-libavfilter-develUpgrade libavformat-develUpgrade libavfilter-develUpgrade libswresample2Upgrade libswscale-develUpgrade ffmpeg-4-libswresample-develUpgrade ffmpegUpgrade libswscale5_9Upgrade ffmpeg-private-develUpgrade libavutil55-32bitUpgrade libavcodec58_134-32bitUpgrade libavcodec57Upgrade libavformat58_76Upgrade libswscale4-32bit	May 13, 2024	Apr 19, 2024
Ubuntu	—	Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter9Upgrade libpostproc54 (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libswresample4 (Ubuntu Pro)Upgrade libavformat-extra60Upgrade libavcodec60 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavcodec-extra60Upgrade libavutil55 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libswscale7 (Ubuntu Pro)Upgrade libavformat-extra (Ubuntu Pro)Upgrade libavutil58 (Ubuntu Pro)Upgrade libswscale7Upgrade libavfilter-extra9Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavfilter-extra9 (Ubuntu Pro)Upgrade libswresample4Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice60 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade ffmpegUpgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat60Upgrade libpostproc57Upgrade libavcodec-extra60 (Ubuntu Pro)Upgrade libavcodec60Upgrade libavresample4 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavutil58Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter9 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat-extra60 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavdevice60Upgrade libavformat60 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libpostproc57 (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)	Jun 6, 2024	Apr 19, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence