CVE Catalog

CVE-2023-6879

CriticalCVSS 9.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.17%

63th percentile - higher than 63% of all known CVEs

Summary

Increasing the resolution of video frames while performing a multi-threaded encode can result in a heap overflow in av1_loop_restoration_dealloc().

Risk Assessment

Heap overflow may allow an attacker to execute arbitrary code, posing a serious threat to system integrity.

Recommendation

It is recommended to update the software to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS