DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2025-09-24
Ein Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-59734US | — | — | ||
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2.
When a STOR chunk is present, a subsequent FOBJ chunk will… | ||||
| CVE-2025-59733US | — | — | ||
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type (and size), and that if there are… | ||||
| CVE-2025-59732US | — | — | ||
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8.
If the height or width of the image… | ||||
| CVE-2025-59731US | — | — | ||
When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data.
We… | ||||
| CVE-2025-59730US | — | — | ||
When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it.
Frames encoded with codec 48 can specify their resolution… | ||||
| CVE-2025-59729US | — | — | ||
When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer.
If we… | ||||
| CVE-2025-59728US | — | — | ||
When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent bel… | ||||
02
references
External citations — patches, advisories, analysis.
- Fedora Security Advisory FEDORA-EPEL-2026-7E25A1D2EC vom 2026-05-22external
- FFmpeg Security vom 2025-09-24external
- SUSE Security Update SUSE-SU-2025:3810-1 vom 2025-10-27external
- openSUSE Security Update OPENSUSE-SU-2026:20855-1 vom 2026-06-02external
- SUSE Security Update SUSE-SU-2025:3715-1 vom 2025-10-22external
- SUSE Security Update SUSE-SU-2026:2445-1 vom 2026-06-18external
- SUSE Security Update SUSE-SU-2026:2444-1 vom 2026-06-18external
- Ubuntu Security Notice USN-7982-1 vom 2026-01-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan