CVE-2025-25473

FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformatfreecontext function in libavutil/mem.c...

CVE-2025-25471

FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c...

CVE-2025-25473

CVE-2025-25473 affects FFmpeg’s avformat_free_context in libavutil/mem.c, causing a memory leak that could lead to DoS through resource exhaustion. Connected advisories confirm patched revisions: Debian (FFmpeg 7.1.3-0+deb13u1), Fedora (FFmpeg 7.1.2), SUSE (SUSE-SU-2025:1128-1, updated to 4.4.5),...

CVE-2025-25471

FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c...

CVE-2025-25473

FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformatfreecontext function in libavutil/mem.c...

CVE-2025-1373

A flaw was found in FFmpeg. This vulnerability allows a null pointer dereference function in libavformat/mov.c, leading to potential crashes when processing maliciously crafted MOV files. Mitigation Mitigation for this issue is either not available or the currently available options do not meet t...

UBUNTU-CVE-2025-1373

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2025-1373 FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2025-1373 FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2025-1373

FFmpeg up to 7.1 is affected in MOV Parser (libavformat/mov.c: mov_read_trak) where input manipulation can trigger a NULL pointer dereference. Local access is required. Public exploit details exist. A patch is provided (commit/patch hash 43be8d07281caca2e88bfd8ee2333633e1fb1a13); Fedora lists ffm...

CVE-2025-1373 FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2025-1373

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

PT-2025-6903 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 7.1 Description: A problem has been found in the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approa...

PT-2025-7095

Name of the Vulnerable Software and Affected Versions: FFmpeg git master before commit c08d30 Description: A NULL pointer dereference was discovered in the libavformat/mov.c component. Recommendations: For FFMpeg git master before commit c08d30, update to a version that includes the fix for this...

PT-2025-7093 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg git master before commit fd1772 Description: A NULL pointer dereference was discovered in the component libavformat/mov.c. This issue affects the FFmpeg git master before commit fd1772. Recommendations: For FFmpeg git master before...

Security update for gstreamer

This update for gstreamer fixes the following issues: CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. boo1234449 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2025:0070-1 Security update for gstreamer

This update for gstreamer fixes the following issues: - CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. boo1234449...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47539: Fixed an out-of-bounds write in converttos3341a...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47543: Fixed an out-of-bounds write in...

SUSE SLED15: gstreamer-plugins-good / gstreamer-plugins-good-32bit / etc (SUSE-SU-2025:0055-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0055-1 advisory. - CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can le...