CVE-2023-6601 — Ffmpeg: hls unsafe file extension bypass in ffmpeg

CVE-2023-6601

Ffmpeg: hls unsafe file extension bypass in ffmpeg PUBLISHED

Description (CNA)

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 2.0 before 6.*

CWE

CWE-99

References

https://bugzilla.redhat.com/show_bug.cgi?id=2253172

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html