FFmpeg libx264 Encoding Arbitrary Code

FFmpeg library encoding with libx264 has improper code generation control, enabling arbitrary code execution via a crafted AAC file.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2025-25467	18 Feb 202522:15	–	circl
CNNVD	libx264 security vulnerabilities	18 Feb 202500:00	–	cnnvd
CVE	CVE-2025-25467	18 Feb 202500:00	–	cve
Cvelist	CVE-2025-25467	18 Feb 202500:00	–	cvelist
Debian CVE	CVE-2025-25467	18 Feb 202500:00	–	debiancve
EUVD	EUVD-2025-4692	3 Oct 202520:07	–	euvd
Mend	CVE-2025-25467	18 Feb 202500:00	–	mend
NVD	CVE-2025-25467	18 Feb 202522:15	–	nvd
osv_debian	DEBIAN-CVE-2025-25467	18 Feb 202522:15	–	osv_debian
osv_echo	ECHO-B0AE-FACC-5AE1 The CVE text claims arbitrary code execution "via creating a crafted AAC file" in libx264. libx264 is an H.264 encoder and never parses AAC or any other container or audio input. The only reference, x264 issue #75, is a LeakSanitizer report from running FFmpeg's configure checks with --enable-libx264: when x264_encoder_open() fails, its fail: path frees the encoder without x264_param_cleanup(), so the copied parameter strings (a few hundred bytes) leak once. There is no out-of-bounds access, no use-after-free and no attacker-controlled data involved. FFmpeg closed the original ticket as invalid and pointed at the leak in libx264. The record was assigned by MITRE with no CNA score; the 9.8 comes from CISA-ADP. Debian rates it unimportant in every suite ("Negligible security impact, usually only used for short-lived processes"), and no x264 commit since the report touches this path, so there is nothing to backport.	1 Jun 202607:30	–	osv_echo