5.3
Moyenne
CVE-2025-1594 A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
Description
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ffmpeg | 7.1 | Pas de correctif indiqué |
| ffmpeg 7.0 | 7.0 → 7.0.2 | Pas de correctif indiqué |
| ffmpeg 6.1 | 6.1.0 → 6.1.2 | Pas de correctif indiqué |
| ffmpeg 5.1 | 5.1.0 → 5.1.6 | Pas de correctif indiqué |
| ffmpeg 4.4 | 4.4.0 → 4.4.5 | Pas de correctif indiqué |
| ffmpeg 4.3 | 4.3.0 → 4.3.8 | Pas de correctif indiqué |
| ffmpeg 4.2 | 4.2.0 → 4.2.10 | Pas de correctif indiqué |
| ffmpeg 3.4 | 3.4.0 → 3.4.13 | Pas de correctif indiqué |
Références
- VDB-296589 | FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow vuldb.com
- VDB-296589 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #496929 | FFmpeg git master stack-buffer-overflow vuldb.com
- trac.ffmpeg.org trac.ffmpeg.org
- trac.ffmpeg.org trac.ffmpeg.org
- ffmpeg.org ffmpeg.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de ffmpeg
Les 11 CVE de ffmpeg →
CVE-2026-90816
A vulnerability was found in FFmpeg 8.0.x
5.3
Moyenne
CVE-2026-90815
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1
5.3
Moyenne
CVE-2025-1816
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb
5.3
Moyenne
CVE-2025-1373
A vulnerability was found in FFmpeg up to 7.1
4.8
Moyenne