[SECURITY] [DSA 6007-1] ffmpeg security update

🗓️ 21 Sep 2025 14:27:49Reported by DebianType

FFmpeg security update fixes three vulnerabilities that could cause denial of service or code execution; upgrade to 7:7.1.2-0+deb13u1 for trixie.

Reporter	Title	Published	Views	Family All 158
ATTACKERKB	CVE-2025-7700	7 Nov 202518:59	–	attackerkb
AlpineLinux	CVE-2025-1594	23 Feb 202521:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	13 Jan 202614:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	13 Jan 202614:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	22 Aug 202511:49	–	astralinux
BDU FSTEC	The vulnerability of the config_input() function in the FFmpeg multimedia library allows a hacker to trigger a service failure.	22 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ff_aac_search_for_tns` function in the `libavcodec/aacenc_tns.c` file of the FFmpeg multimedia library allows a perpetrator to gain unauthorized access to protected information, compromise its integrity, and cause service failures.	22 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FFmpeg multimedia library, related to pointer dereferencing errors, allows attackers to trigger a service failure.	16 Mar 202600:00	–	bdu_fstec
Chainguard	CVE-2025-1594 vulnerabilities	20 Sep 202501:30	–	cgr
Circl	CVE-2025-10256	27 Sep 202522:07	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	13	any	ffmpeg	7:7.1.2-0+deb13u1	ffmpeg_7:7.1.2-0+deb13u1_any.deb
Debian	13	amd64	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_amd64.deb
Debian	13	arm64	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_arm64.deb
Debian	13	armel	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_armel.deb
Debian	13	armhf	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_armhf.deb
Debian	13	i386	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_i386.deb
Debian	13	ppc64el	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_ppc64el.deb
Debian	13	riscv64	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_riscv64.deb
Debian	13	s390x	ffmpeg-dbgsym	7:7.1.2-0+deb13u1	ffmpeg-dbgsym_7:7.1.2-0+deb13u1_s390x.deb
Debian	13	any	ffmpeg-doc	7:7.1.2-0+deb13u1	ffmpeg-doc_7:7.1.2-0+deb13u1_any.deb

21 Sep 2025 14:27Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.3 - 8.8

CVSS 45.3

CVSS 27.5

CVSS 36.3

EPSS0.00534

SSVC