Linux Distros Unpatched Vulnerability : CVE-2025-59729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the...

CVE-2025-59729

creationtimestamp| type| source ---|---|--- 2025-10-06 13:56:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115327565160692907...

CVE-2025-59729 Heap-buffer-overflow read in FFmpeg DHAV get_duration

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...

CVE-2025-59729

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...