4.8
Medium
CVE-2025-1373 A vulnerability was found in FFmpeg up to 7.1
Description
A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The patch is identified as 43be8d07281caca2e88bfd8ee2333633e1fb1a13. It is recommended to apply a patch to fix this issue.
Affected products and versions
References
- VDB-295982 | FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference vuldb.com
- VDB-295982 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #496930 | FFmpeg git master NULL Pointer Dereference vuldb.com
- trac.ffmpeg.org trac.ffmpeg.org
- trac.ffmpeg.org trac.ffmpeg.org
- git.ffmpeg.org git.ffmpeg.org
- ffmpeg.org ffmpeg.org
Timeline
- Published
- Last modified
Other CVEs of ffmpeg
The 11 CVEs of ffmpeg →
CVE-2026-90816
A vulnerability was found in FFmpeg 8.0.x
5.3
Medium
CVE-2026-90815
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1
5.3
Medium
CVE-2025-1816
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb
5.3
Medium
CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
5.3
Medium