Use-After-Free Vulnerability in rust-ffmpeg Product by Rust
CVE-2025-57616

7.5HIGH

Key Information:

Vendor

Rust

Status
rust-ffmpeg
Vendor
CVE Published:
2 September 2025

What is CVE-2025-57616?

A vulnerability has been identified in rust-ffmpeg version 0.3.0, where the write_interleaved method encounters a use-after-free issue. This occurs due to the method's violation of Rust's aliasing rules, as it attempts to modify a data structure via a mutable pointer while only holding an immutable reference. This improper handling can result in undefined behavior, potentially leading to memory corruption or denial of service when the affected data is accessed.

References

https://github.com/meh/rust-ffmpeg/issues/192

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.