/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-952v-9j33-4mq9

Published

Last updated

https://images.chainguard.dev/security/CGA-952v-9j33-4mq9
Package

ffmpeg-6

Repository

Chainguard

Latest Update
Not affected
Aliases
  • CVE-2023-51793
  • GHSA-hwp9-p6mr-p438

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2023-51793

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

The mpegvideo_enc heap buffer overflow has been fixed in FFmpeg 6.1.2. The fix (commit a066b8a809) corrected the memcpy size calculation at libavcodec/mpegvideo_enc.c:1216. The vulnerable code 'memcpy(dst, src, src_stride * h)' would copy beyond actual image data. The fixed calculation 'src_stride * h - src_stride + w' properly accounts for the last line having only width bytes instead of full stride, preventing buffer overread. This ensures exactly the correct amount of data is copied.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing