FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 27, 2026 | Jul 27, 2026 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade libavfilter6Upgrade libavresample3Upgrade libpostproc-develUpgrade libswscale8Upgrade libavresample-develUpgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libavdevice57Upgrade ffmpeg-private-develUpgrade libavcodec57Upgrade libavformat57Upgrade libswresample5Upgrade libavutil55-32bitUpgrade libavutil59Upgrade libavdevice-develUpgrade ffmpegUpgrade libavfilter10Upgrade libswresample2Upgrade libavformat61Upgrade ffmpeg-7Upgrade libavfilter6-32bitUpgrade libavdevice57-32bitUpgrade libavutil-develUpgrade libswscale4Upgrade libpostproc58Upgrade libavformat-develUpgrade libavcodec57-32bitUpgrade libswscale4-32bitUpgrade libavutil55Upgrade libswresample2-32bitUpgrade libavfilter-develUpgrade libswresample-develUpgrade libavcodec-develUpgrade libpostproc54Upgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavdevice61Upgrade libavcodec61 | Dec 5, 2025 | May 5, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Jan 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub