Heap Buffer Overflow in SANM File Decoder of ANIM v0 Variant by Google

CVE-2025-59730

What is CVE-2025-59730?

A heap buffer overflow vulnerability exists in the SANM file decoding process for ANIM v0 variants, where the allocated buffer for decoded data may be insufficient. Frames encoded with codec 48 specify resolution details, but the lack of validation when processing the decoded frame can lead to significant data corruption and potential exploit scenarios. To mitigate risks, it is advised to upgrade to version 8.0 or later.

References