{
  "cveId": "CVE-2023-6604",
  "url": "https://patchblox.com/security/cve/CVE-2023-6604",
  "summary": "CVE-2023-6604 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2023-6604, released January 6, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ffmpeg: A flaw was found in FFmpeg",
  "description": "A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.",
  "published": "2025-01-06T17:15:14Z",
  "severity": "medium",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.00466,
  "epssPercentile": 0.40534,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ffmpeg",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "7:5.1.7-0\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2023-6604",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-6604",
      "released": "2025-01-06T17:15:14Z"
    },
    {
      "platform": "linux",
      "product": "ffmpeg",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "7:7.1.1-1",
      "fix": "DEBIAN-CVE-2023-6604",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-6604",
      "released": "2025-01-06T17:15:14Z"
    },
    {
      "platform": "linux",
      "product": "ffmpeg",
      "release": "Debian 14",
      "fixedVersion": "7:7.1.1-1",
      "fix": "DEBIAN-CVE-2023-6604",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-6604",
      "released": "2025-01-06T17:15:14Z"
    },
    {
      "platform": "linux",
      "product": "ffmpeg-7",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "7.1.5-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21877-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21877-1",
      "released": "2026-09-18T07:48:05Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}