FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Nov 29, 2024 |
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.1Upgrade to FFmpeg version 5.1.7Upgrade to FFmpeg version 7.0.3Upgrade to FFmpeg version 6.1.3 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavutil55Upgrade libpostproc54Upgrade libpostproc55_9-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-7Upgrade libavdevice61Upgrade libavresample-develUpgrade libavfilter-develUpgrade ffmpeg-4-private-develUpgrade libavcodec57-32bitUpgrade libavfilter6-32bitUpgrade libavformat-develUpgrade libswscale5_9-32bitUpgrade libswresample2-32bitUpgrade libavresample4_0-32bitUpgrade libavcodec-develUpgrade libavformat61Upgrade ffmpeg-4Upgrade libavdevice-develUpgrade libswresample2Upgrade libavutil56_70Upgrade libswresample3_9-32bitUpgrade libswscale4-32bitUpgrade libavformat58_76-32bitUpgrade libswresample-develUpgrade ffmpeg-4-libavresample-develUpgrade libpostproc54-32bitUpgrade libavutil56_70-32bitUpgrade libavutil-develUpgrade libswscale4Upgrade libavfilter7_110Upgrade ffmpeg-4-libswscale-develUpgrade libavformat58_76Upgrade libpostproc55_9Upgrade libswscale5_9Upgrade libswresample3_9Upgrade libavcodec58_134-32bitUpgrade libavfilter6Upgrade libavcodec57Upgrade libavutil55-32bitUpgrade libavdevice57Upgrade ffmpeg-4-libavutil-develUpgrade libswscale-develUpgrade ffmpeg-private-develUpgrade libpostproc-develUpgrade libavcodec61Upgrade libswresample5Upgrade libavdevice58_13Upgrade libavcodec58_134Upgrade libswscale8Upgrade libavutil59Upgrade libavresample3Upgrade libavformat57Upgrade libpostproc58Upgrade libavformat57-32bitUpgrade libavdevice58_13-32bitUpgrade libavfilter10Upgrade ffmpegUpgrade libavdevice57-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libswresample-develUpgrade libavresample3-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavresample4_0Upgrade libavfilter7_110-32bit | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub