~ / search / GHSA-2jx3-fx5f-r2c6

GHSA-2jx3-fx5f-r2c6

Withdrawn on 2024-03-12. GitHub withdrew this advisory; it no longer applies.

FFmpeg discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-39018

Packages

EcosystemPackageAffectedFixed in
Maven net.bramp.ffmpeg:ffmpeg <= 0.7.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

## Withdrawn This advisory has been withdrawn because it has been found to be disputed. Please see the issue [here](https://github.com/bramp/ffmpeg-cli-wrapper/issues/291) for more information. ## Original Despcription FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>. This vulnerability is exploited via passing an unchecked argument.

References

External links from the advisory. They lead to third-party sites.