Memory Leak Vulnerability in FFmpeg by FFmpeg Developers
CVE-2025-25468

6.5MEDIUM

Key Information:

Vendor

FFmpeg

Status
FFmpeg
Vendor
CVE Published:
18 February 2025

What is CVE-2025-25468?

A memory leak has been identified in FFmpeg affecting the libavutil component, which could potentially lead to memory exhaustion over time. This issue originates from the git-master version of FFmpeg prior to commit d5873b. If exploited within certain applications, this vulnerability could degrade performance and stability, making it imperative for users and administrators to update to the latest version to mitigate potential risks.

References

https://trac.ffmpeg.org/ticket/11415
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/d5873be58...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.