CVE-2023-6604 MEDIUM

CVE-2023-6604: Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

Weakness CWE-99

Published January 6, 2025

Last update November 3, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

Key dates

02Disclosure timeline

January 6, 2025 CVE published

November 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-6604 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/99.html

Related vulnerabilities

04Related CVE

CVE-2025-43491 Poly Lens Desktop Application – Privilege Escalation CVE-2025-0625 CampCodes School Management Software Attachment resource injection CVE-2026-13493 AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection CVE-2026-5031 BichitroGan ISP Billing Software Endpoint users-view resource injection CVE-2024-4294 PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection