JLSEC-2025-125 FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init fu...

🗓️ 19 Oct 2025 19:08:53Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

FFmpeg version n6.1.1 has a heap use-after-free via av_hwframe_ctx_init.

Reporter	Title	Published	Views	Family All 89
AlpineLinux	CVE-2024-31578	17 Apr 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в ffmpeg, ffmpeg5	20 May 202605:53	–	astralinux
CNNVD	FFmpeg 安全漏洞	17 Apr 202400:00	–	cnnvd
CNVD	Ffmpeg Memory Misreference Vulnerability (CNVD-2024-29683)	22 Apr 202400:00	–	cnvd
CVE	CVE-2024-31578	17 Apr 202400:00	–	cve
Cvelist	CVE-2024-31578	17 Apr 202400:00	–	cvelist
Debian	[SECURITY] [DLA 3928-1] ffmpeg security update	21 Oct 202414:51	–	debian
Debian CVE	CVE-2024-31578	17 Apr 202400:00	–	debiancve
Tenable Nessus	Debian dla-3928 : ffmpeg - security update	21 Oct 202400:00	–	nessus
Tenable Nessus	Fedora 38 : chromium (2024-3a548f46a8)	18 May 202400:00	–	nessus

Source	Link
gist	www.gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179
github	www.github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/

06 Nov 2025 23:03Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00323

SSVC

FFmpeg version n6.1.1 heap use after free av_hwframe_ctx_init