CVE-2025-1816 FFmpeg IAMF File iamf_parse.c audio_element_obu memory leak

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of the file libavformat/iamfparse.c of the component IAMF File Handler. The manipulation of the argument numparameters leads to memory leak...

CVE-2025-1816

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of the file libavformat/iamfparse.c of the component IAMF File Handler. The manipulation of the argument numparameters leads to memory leak...

CVE-2025-1816: Missing Release of Memory after Effective Lifetime

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of the file libavformat/iamfparse.c of the component IAMF File Handler. The manipulation of the argument numparameters leads to memory leak...

UBUNTU-CVE-2025-25469

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c...

CVE-2025-25469

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg versions prior to d5873b, which stems from the component libavutil/iamf.c not properly freeing memory. An attacker exploiting this vulnerability...

PT-2025-9210

Name of the Vulnerable Software and Affected Versions FFmpeg versions up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb Description A problematic vulnerability has been found in FFmpeg, affecting the function audio element obu of the file libavformat/iamf parse.c of the component IAMF File Handler...

PT-2025-7092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit d5873b Description The vulnerability is a memory leak in the libavutil/iamf.c component. Exploitation may allow a remote attacker to disclose protected information. The vulnerability can be exploited to crash...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4554550985424896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6271067079901184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5931276639469568 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Index-out-of-bounds in ipcm_decoder_config

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4971166119821312 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in ff_mpeg4audio_get_config_gb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4833546039525376 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x612000000703 Cras...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in scalable_channel_layout_config

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6256656668229632 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60a000000108 Cras...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Global-buffer-overflow in av_channel_layout_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4554553191104512 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000000df8ae8 Cras...

ABB IDAL HTTP Server Uncontrolled Format String

XL-19-012 - ABB IDAL HTTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-012 CVE-2019-7228 ABBVU-IAMF-1902007 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...

ABB IDAL HTTP Server Authentication Bypass

XL-19-010 - ABB IDAL HTTP Server Authentication Bypass Vulnerability ======================================================================== Identifiers ----------- XL-19-010 CVE-2019-7226 ABBVU-IAMF-1902005 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...

ABB IDAL FTP Server Uncontrolled Format String

XL-19-004 - ABB IDAL FTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-004 CVE-2019-7230 ABBVU-IAMF-1902008 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...