Medium severity5.3OSV Advisory· Published Dec 31, 2024· Updated Jun 17, 2026

CVE-2023-6602

Description

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpegllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: >=2.0,<=6.0
- (no CPE)range: n2.0, n2.1-dev, n2.2-dev, …
osv-coords2 versions
pkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/ffmpeg-8&distro=openSUSE%20Tumbleweed
< 7.1.5-2.1+ 1 more
- (no CPE)range: < 7.1.5-2.1
- (no CPE)range: < 8.1.2-5.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2025/07/msg00004.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000