HomeDefectsLIN1022-12592
Fixed

LIN1022-12592 : Security Advisory - ffmpeg - CVE-2023-6601

Created: Jan 6, 2025    Updated: Dec 7, 2025
Resolved Date: Nov 24, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.23
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

CVEs