Homepage

CVE-2025-0518 Affecting ffmpeg package, versions *

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIANUNSTABLE-FFMPEG-8642817
  • published17 Jan 2025
  • disclosed16 Jan 2025
Report a new vulnerability Found a mistake?

Introduced: 16 Jan 2025

NewCVE-2025-0518  (opens in a new tab)

How to fix?

There is no fixed version for Debian:unstable ffmpeg.

NVD Description

Note: Versions mentioned in the description apply only to the upstream ffmpeg package and not the ffmpeg package as distributed by Debian. See How to fix? for Debian:unstable relevant fixed versions and status.

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .

This issue affects FFmpeg: 7.1.

Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a

https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman