# CVE-2023-50010: ffmpeg-4: This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointe... CVE-2023-50010 is fixed in 28 products on 1 platform, first by DEBIAN-CVE-2023-50010, released April 19, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2023-50010 - Priority: High - CVSS: 7.8 (high) - EPSS: 0.0048 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Apr 19, 2024 ## Description This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointer dereference via the component /libavcodec/jpeg2000dec.c (bsc#1237382). - CVE-2025-25473: Fixed memory leak in avformat_free_context() (bsc#1237351). - CVE-2025-0518: Fixed unchecked sscanf return value which leads to memory data leak (bsc#1236007). - CVE-2025-22919: Fixed denial of service (DoS) via opening a crafted AAC file (bsc#1237371). - CVE-2024-12361: Fixed NULL Pointer Dereference (bsc#1237358). - CVE-2024-35368: Fixed Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c (bsc#1234028). - CVE-2024-36613: Fixed Integer overflow in ffmpeg (bsc#1235092). - CVE-2023-50010: Fixed arbitrary code execution via the set_encoder_id function in /fftools/ffmpeg_enc.c component (bsc#1223256). - CVE-2023-51794: Fixed heap-buffer-overflow at libavfilter/af_stereowiden.c (bsc#1223437). - CVE-2023-51793: Fixed heap buffer overflow in the image_copy_plane function in libavutil/imgutils.c (bsc#1223272). - CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235). - CVE-2023-51798: Fixed floating point exception(FPE) via the interpolate function in libavfilter/vf_minterpolate.c (bsc#1223304). - CVE-2024-31578: Fixed heap use-after-free via the av_hwframe_ctx_init function (bsc#1223070). - CVE-2024-7055: Fixed heap-based buffer overflow in pnmdec.c (bsc#1229026). - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in load_input_picture (bsc#1227296). Other fixes: - Updated to version 4.4.5. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | ffmpeg Debian 12.15 (bookworm) | 7:5.1.5-0+deb12u1 | [DSA-5712-1](https://patchblox.com/security/data/fix/linux/dsa-5712-1.md) | Jun 15, 2024 | | Linux | ffmpeg Debian 13.5 (trixie) | 7:7.0.1-3 | [DEBIAN-CVE-2023-50010](https://patchblox.com/security/data/fix/linux/debian-cve-2023-50010.md) | Apr 19, 2024 | | Linux | ffmpeg Debian 14 | 7:7.0.1-3 | [DEBIAN-CVE-2023-50010](https://patchblox.com/security/data/fix/linux/debian-cve-2023-50010.md) | Apr 19, 2024 | | Linux | ffmpeg Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [ffmpeg 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | ffmpeg Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [ffmpeg 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ffmpeg-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | ffmpeg Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ffmpeg-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | ffmpeg opensuse-leap 15.6 | 3.4.2-150200.11.44.1 | [SUSE-SU-2024:1593-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-1593-1.md) | May 10, 2024 | | Linux | ffmpeg-4 opensuse-leap 15.6 | 4.4.5-150600.13.16.1 | [SUSE-SU-2025:0862-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0862-1.md) | Mar 14, 2025 | | Linux | ffmpeg-4 sles 15.6 | 4.4.5-150600.13.16.1 | [SUSE-SU-2025:0862-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0862-1.md) | Mar 14, 2025 | | Linux | libavcodec-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavcodec-extra 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec-extra Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavcodec-extra 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavcodec-extra 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec-extra-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavcodec-extra57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra57-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec-extra58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra58-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec-extra58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec-extra58-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavcodec57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavcodec57 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec57-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavcodec58 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec58-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavcodec58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec58-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavdevice57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavdevice57 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavdevice57-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavdevice58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavdevice58 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavdevice58-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavdevice58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavdevice58-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavfilter-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavfilter-extra 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter-extra Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavfilter-extra 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavfilter-extra 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter-extra-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavfilter-extra6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra6-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter-extra7 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra7-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter-extra7 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter-extra7-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavfilter6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavfilter6 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter6-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter7 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavfilter7 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter7-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavfilter7 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter7-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavformat-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavformat-extra 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat-extra-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavformat-extra58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat-extra58-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavformat57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavformat57 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavformat57-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavformat58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavformat58 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavformat58-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavformat58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat58-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libavresample3 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavresample3 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavresample3-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavresample4 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavresample4 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavresample4-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavutil55 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libavutil55 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavutil55-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavutil56 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libavutil56 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavutil56-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libavutil56 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavutil56-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libpostproc54 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libpostproc54 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpostproc54-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libpostproc55 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libpostproc55 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libpostproc55-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libpostproc55 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpostproc55-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libswresample2 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libswresample2 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswresample2-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libswresample3 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libswresample3 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswresample3-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libswresample3 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libswresample3-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | | Linux | libswscale4 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | [libswscale4 7:3.4.11-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswscale4-7-3.4.11-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libswscale5 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | [libswscale5 7:4.2.7-0ubuntu0.1+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswscale5-7-4.2.7-0ubuntu0.1-esm5.md) | Apr 26, 2024 | | Linux | libswscale5 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | [libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libswscale5-7-4.4.2-0ubuntu0.22.04.1-esm4.md) | Apr 26, 2024 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.