JLSEC-2025-130 FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_...

🗓️ 19 Oct 2025 19:08:53Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

FFmpeg memory consumption issue when using colorcorrect filter via av_malloc in libavutil mem.c:105:9.

Reporter	Title	Published	Views	Family All 63
AlpineLinux	CVE-2023-50008	19 Apr 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в ffmpeg5	3 May 202623:59	–	astralinux
Circl	CVE-2023-50008	10 Jun 202513:30	–	circl
CNNVD	FFmpeg 安全漏洞	19 Apr 202400:00	–	cnnvd
CNVD	FFmpeg buffer overflow vulnerability (CNVD-2024-29679)	24 Apr 202400:00	–	cnvd
CVE	CVE-2023-50008	19 Apr 202400:00	–	cve
Cvelist	CVE-2023-50008	19 Apr 202400:00	–	cvelist
Debian	[SECURITY] [DSA 5985-1] ffmpeg security update	25 Aug 202518:23	–	debian
Debian CVE	CVE-2023-50008	19 Apr 202400:00	–	debiancve
Tenable Nessus	Debian dsa-5985 : ffmpeg - security update	25 Aug 202500:00	–	nessus

Source	Link
github	www.github.com/FFmpeg/FFmpeg/commit/5f87a68cf70dafeab2fb89b42e41a4c29053b89b
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
trac	www.trac.ffmpeg.org/ticket/10701
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/

06 Nov 2025 23:03Current

7High risk

Vulners AI Score7

CVSS 3.17.8

EPSS0.00031

SSVC

colorcorrect filter memory consumption av_malloc libavutil mem.c 105:9 ffmpeg vulnerability