CVE-2023-50007

Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5

Description: The issue is related to a Buffer Overflow in the av samples set silence function, located in the libavutil/samplefmt.c component of the Ffmpeg library. This allows a local attacker to potentially execute arbitrary code. The vulnerability is associated with a buffer overflow operation that can lead to the disclosure of protected information.

Recommendations: For Ffmpeg version v.n6.1-3-g466799d4f5, consider disabling the av samples set silence function as a temporary workaround until a patch is available. Restrict access to the libavutil/samplefmt.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.