{"id":"CVE-2023-48368","aliases":["DEBIAN-CVE-2023-48368","EUVD-2023-52421","GHSA-cgrv-qh7r-p7q6","SUSE-SU-2024:3198-1","SUSE-SU-2024:3289-1","SUSE-SU-2024:3295-1","SUSE-SU-2024:3309-1","SUSE-SU-2024:3339-1","SUSE-SU-2024:3358-1","SUSE-SU-2024:3397-1","SUSE-SU-2025:0050-1","UBUNTU-CVE-2023-48368","openSUSE-SU-2025:14936-1","openSUSE-SU-2025:14974-1","openSUSE-SU-2025:15010-1","openSUSE-SU-2026:20710-1"],"status":"published","title":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated...","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00239,"percentile":0.1507,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-20"],"published":"2024-05-16T20:47:40Z","modified":"2026-10-26T18:02:49Z","fixes":[{"ecosystem":"Debian:13","package":"onevpl-intel-gpu","fixed_in":["24.3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"onevpl-intel-gpu","fixed_in":["24.3.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"intel-mediasdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.5.4-1"]},{"source":"osv","ecosystem":"Debian:12","package":"onevpl-intel-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.6.4-1","23.2.3-1","24.3.3-1","24.3.4-1","25.1.2-1","25.1.4-1","25.3.1-1","26.1.2-1","26.1.2-1.1","26.3.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"onevpl-intel-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"onevpl-intel-gpu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.3.3-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.22.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.22.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.4.22.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-150500.3.25.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-150500.3.25.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libvpl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.0.0-150500.3.2.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libvpl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.0.0-150500.3.2.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.0-150500.3.25.2"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libvpl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.0.0-150500.3.2.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"gstreamer-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.23.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.0-3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.0-3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.0-3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.6.1-150500.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.6.1-150500.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.6.1-150500.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-150400.3.42.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.3.4-150400.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.3.4-150400.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.3.4-150400.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libmfx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.3.4-150400.3.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"intel-mediasdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.2.1-1","19.4.0-1","19.4.0-1build1","20.1.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"intel-mediasdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.1.0-1","21.3.4-1","22.1.0-1","22.3.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"intel-mediasdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.5.4-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.5-9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1-1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.2-3.1"}]}],"bundled":14}],"products":[{"vendor":"intel","product":"media_sdk"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48368"},{"url":"https://github.com/advisories/GHSA-cgrv-qh7r-p7q6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-48368","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243198-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219494","tags":["report"]},{"url":"https://bugzilla.suse.com/1226892","tags":["report"]},{"url":"https://bugzilla.suse.com/1226897","tags":["report"]},{"url":"https://bugzilla.suse.com/1226898","tags":["report"]},{"url":"https://bugzilla.suse.com/1226899","tags":["report"]},{"url":"https://bugzilla.suse.com/1226900","tags":["report"]},{"url":"https://bugzilla.suse.com/1226901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48368","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243289-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218534","tags":["report"]},{"url":"https://bugzilla.suse.com/1223263","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50186","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243295-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243309-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243339-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243358-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1229026","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7055","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243397-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250050-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-48368","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48368","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GBGGBDABKAXEMYS3ELQOOTZKY5CRNTCF/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-31578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1816","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VRV2HFFHZK4M5WT2N2QVH4SDEORPP6SK/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-25473","tags":["web"]},{"url":"https://bugzilla.suse.com/1198898","tags":["report"]},{"url":"https://bugzilla.suse.com/1220545","tags":["report"]},{"url":"https://bugzilla.suse.com/1223304","tags":["report"]},{"url":"https://bugzilla.suse.com/1226308","tags":["report"]},{"url":"https://bugzilla.suse.com/1230983","tags":["report"]},{"url":"https://bugzilla.suse.com/1234018","tags":["report"]},{"url":"https://bugzilla.suse.com/1234019","tags":["report"]},{"url":"https://bugzilla.suse.com/1234020","tags":["report"]},{"url":"https://bugzilla.suse.com/1246790","tags":["report"]},{"url":"https://bugzilla.suse.com/1251137","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7700","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-48368","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T20:47:40.238Z","modified":"2024-08-02T21:30:34.498Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:35:25.866071Z"}],"euvd":[{"id":"EUVD-2023-52421","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T20:47:40Z","modified":"2024-08-02T21:30:34Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:49:57.383318Z"}],"ghsa":[{"id":"GHSA-cgrv-qh7r-p7q6","title":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated...","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T21:32:01Z","modified":"2024-07-03T18:42:17Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:57:36.522163Z"}],"nvd":[{"id":"CVE-2023-48368","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T21:16:01.077Z","modified":"2026-06-17T06:34:07.19Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-119"],"updated_at":"2026-11-02T14:09:15.329996Z"}],"osv":[{"id":"CVE-2023-48368","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T21:16:01.077Z","modified":"2026-05-11T08:29:28.254149746Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:34.72355Z"},{"id":"DEBIAN-CVE-2023-48368","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T21:16:01.077Z","modified":"2026-10-26T18:02:49.940197251Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"UBUNTU-CVE-2023-48368","description":"Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.","status":"published","published":"2024-05-16T21:16:00Z","modified":"2026-04-22T14:14:21.065229Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"openSUSE-SU-2025:14936-1","title":"ffmpeg-4-4.4.5-9.1 on GA media","description":"These are all security issues fixed in the ffmpeg-4-4.4.5-9.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-28T00:00:00Z","modified":"2026-02-04T04:35:09.755077Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14974-1","title":"ffmpeg-7-7.1.1-1.1 on GA media","description":"These are all security issues fixed in the ffmpeg-7-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-08T00:00:00Z","modified":"2026-02-04T03:04:15.577898Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15010-1","title":"ffmpeg-6-6.1.2-3.1 on GA media","description":"These are all security issues fixed in the ffmpeg-6-6.1.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-18T00:00:00Z","modified":"2026-02-04T02:59:23.876109Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:20710-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n\nChanges in ffmpeg-4:\n\n- CVE-2025-59728: Fixed out-of-bounds NUL-byte write when calculating the content path in handling of MPEG-DASH manifests (bsc#1251137).\n- CVE-2025-7700: Fixed a NULL Pointer Dereference in the ALS Decoder (bsc#1246790)\n- CVE-2024-36618: Fixed a integer overflow in AVI demuxer (bsc#1234020)\n- CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545).\n\n- Update to release 4.4.6\n  * lavc/libx265: unbreak build for X265_BUILD \u003e= 210\n  * ARM: vp9mc: Load only 12 pixels in the 4 pixel wide\n    horizontal filter\n  * rtmpproto: Avoid rare crashes in the `fail:` codepath in\n    rtmp_open\n  * avcodec/snow: Fix off by 1 error in run_buffer\n  * avcodec/mpegvideo_enc: Check FLV1 resolution limits\n","status":"published","published":"2026-05-09T08:50:33Z","modified":"2026-05-11T08:15:31.297138Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2024:3198-1","title":"Security update for gstreamer-plugins-bad","description":"This update for gstreamer-plugins-bad fixes the following issues:\n\n- Dropped support for libmfx to fix the following CVEs:\n  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)\n  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)\n  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)\n  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)\n  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)\n","status":"published","published":"2024-09-10T15:33:55Z","modified":"2026-02-04T03:17:53.261249Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3289-1","title":"Security update for gstreamer-plugins-bad, libvpl","description":"This update for gstreamer-plugins-bad, libvpl fixes the following issues:\n\n- Dropped support for libmfx to fix the following CVEs:\n  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)\n  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)\n  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)\n  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)\n  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)\n\nThe libmfx dependency is replaced by libvpl.\n  ","status":"published","published":"2024-09-17T12:27:10Z","modified":"2025-05-02T04:34:35.043372Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3295-1","title":"Security update for gstreamer-plugins-bad","description":"This update for gstreamer-plugins-bad fixes the following issues:\n\n- Dropped support for libmfx to fix the following CVEs:\n  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)\n  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)\n  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)\n  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)\n  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)\n  ","status":"published","published":"2024-09-18T07:35:12Z","modified":"2026-02-04T04:12:00.38397Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3309-1","title":"Security update for libmfx","description":"This update for libmfx fixes the following issues:\n\n- CVE-2023-48368: Fixed an improper input validation. (bsc#1226897)\n- CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898)\n- CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899)\n- CVE-2023-47282: Fixed an out-of-bounds write. (bsc#1226900)\n- CVE-2023-47169: Fixed an improper buffer restrictions. (bsc#1226901)\n","status":"published","published":"2024-09-18T12:55:10Z","modified":"2026-02-04T04:38:01.757084Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3339-1","title":"Security update for libmfx","description":"This update for libmfx fixes the following issues:\n\n- CVE-2023-48368: Fixed an improper input validation. (bsc#1226897)\n- CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898)\n- CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899)\n- CVE-2023-47282: Fixed an out-of-bounds write. (bsc#1226900)\n- CVE-2023-47169: Fixed an improper buffer restrictions. (bsc#1226901)\n","status":"published","published":"2024-09-19T14:32:08Z","modified":"2026-02-04T03:21:40.68031Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3358-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n\n- Dropped support for libmfx to fix the following CVEs:\n  * libmfx: improper input validation (CVE-2023-48368, bsc#1226897)\n  * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898)\n  * libmfx: out-of-bounds read (CVE-2023-22656, bsc#1226899)\n  * libmfx: out-of-bounds write (CVE-2023-47282, bsc#1226900)\n  * libmfx: improper buffer restrictions (CVE-2023-47169, bsc#1226901)\n- CVE-2024-7055: heap-based buffer overflow in pnmdec.c from the libavcodec library. (bsc#1229026)\n","status":"published","published":"2024-09-20T15:16:35Z","modified":"2026-02-04T03:32:33.670623Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3397-1","title":"Security update for libmfx","description":"This update for libmfx fixes the following issues:\n\n- CVE-2023-48368: Fixed an improper input validation. (bsc#1226897)\n- CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898)\n- CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899)\n- CVE-2023-47282: Fixed an out-of-bounds write. (bsc#1226900)\n- CVE-2023-47169: Fixed an improper buffer restrictions. (bsc#1226901)\n","status":"published","published":"2024-09-23T12:04:18Z","modified":"2026-02-04T03:18:44.242293Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:0050-1","title":"Security update for libmfx","description":"This update for libmfx fixes the following issues:\n\n- CVE-2023-48368: Fixed an improper input validation. (bsc#1226897)\n- CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898)\n- CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899)\n- CVE-2023-47282: Fixed an out-of-bounds write. (bsc#1226900)\n- CVE-2023-47169: Fixed an improper buffer restrictions. (bsc#1226901)\n","status":"published","published":"2025-01-09T16:07:00Z","modified":"2026-02-04T02:23:10.840357Z","updated_at":"2026-11-02T15:53:56.123059Z"}]}}