{"id":"CVE-2023-50009","details":"FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff_gaussian_blur_8 function in libavfilter/edge_template.c:116:5 component.","modified":"2026-08-18T17:26:10.076052Z","published":"2024-04-19T00:00:00Z","related":["openSUSE-SU-2024:13934-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50009.json"},"references":[{"type":"WEB","url":"https://ffmpeg.org/"},{"type":"WEB","url":"https://trac.ffmpeg.org/ticket/10699"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50009.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50009"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/162b4c60c8f72be2e93b759f3b1e14652b70b3ba"},{"type":"FIX","url":"https://github.com/FFmpeg/FFmpeg/commit/c443658d26d2b8e19901f9507a890e0efca79056"},{"type":"PACKAGE","url":"https://github.com/FFmpeg/FFmpeg"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"47ac3e60653da651dfa064b649d0ac297560d8d5"},{"fixed":"083443d67cb159ce469e5d902346b8d0c2cd1c93"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"6.1"},{"fixed":"7.0"}],"source":"CPE_RANGE"}}],"versions":["n6.2-dev","n6.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50009.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"47ac3e60653da651dfa064b649d0ac297560d8d5"},{"fixed":"083443d67cb159ce469e5d902346b8d0c2cd1c93"},{"fixed":"162b4c60c8f72be2e93b759f3b1e14652b70b3ba"},{"fixed":"c443658d26d2b8e19901f9507a890e0efca79056"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"6.1"},{"fixed":"7.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["n6.1","n6.2-dev","n6.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-50009.json","vanir_signatures_modified":"2026-08-18T17:26:10Z","vanir_signatures":[{"source":"https://github.com/ffmpeg/ffmpeg/commit/c443658d26d2b8e19901f9507a890e0efca79056","target":{"file":"libavfilter/edge_template.c"},"deprecated":false,"digest":{"line_hashes":["254816656072124490686853983262355165531","31877602845318401102389784989818087179","17016053981011782868835965702907639683","199446948907900977501436067530578842812","69969355579061885170826474264885430436","285460975446622202328805586670021301166","321098436463018851694964015107991917953","227660988351307664047895135020116668056","81965354233706480648868889876360444616","296528963538907783819436920267520734502","75130143287394892599675853691784355057","328428695336154837885998531478594937666","313785962037767760250860041120881663355","239325395843362531648649165436307751529","260741031318871990208050374177048141566","295448376480883731774345310329218410977","55361497533821152378487336818777007008","254571536006874369023224442166904445867","168285529929421544386420103399512942765","242896767042914815723283613014719112746","149324095117691475210407805343631143220"],"threshold":0.9},"id":"CVE-2023-50009-adc8ee8d","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2023-50009-b5d1eafd","signature_type":"Line","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/162b4c60c8f72be2e93b759f3b1e14652b70b3ba","target":{"file":"libavfilter/edge_template.c"},"deprecated":false,"digest":{"line_hashes":["254816656072124490686853983262355165531","31877602845318401102389784989818087179","17016053981011782868835965702907639683","199446948907900977501436067530578842812","69969355579061885170826474264885430436","285460975446622202328805586670021301166","321098436463018851694964015107991917953","227660988351307664047895135020116668056","81965354233706480648868889876360444616","296528963538907783819436920267520734502","75130143287394892599675853691784355057","328428695336154837885998531478594937666","313785962037767760250860041120881663355","239325395843362531648649165436307751529","260741031318871990208050374177048141566","295448376480883731774345310329218410977","55361497533821152378487336818777007008","254571536006874369023224442166904445867","168285529929421544386420103399512942765","242896767042914815723283613014719112746","149324095117691475210407805343631143220"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/162b4c60c8f72be2e93b759f3b1e14652b70b3ba","target":{"file":"libavfilter/edge_template.c","function":"(gaussian_blur)"},"deprecated":false,"digest":{"length":2035,"function_hash":"102036313291581278114211612626370519488"},"id":"CVE-2023-50009-eef4baff"},{"deprecated":false,"digest":{"length":2035,"function_hash":"102036313291581278114211612626370519488"},"id":"CVE-2023-50009-fc4696c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/ffmpeg/ffmpeg/commit/c443658d26d2b8e19901f9507a890e0efca79056","target":{"file":"libavfilter/edge_template.c","function":"(gaussian_blur)"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H"}]}