FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 27, 2026 | Jul 27, 2026 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade libavcodec57-32bitUpgrade libswscale4-32bitUpgrade libavfilter-develUpgrade libswscale4Upgrade libavformat61Upgrade ffmpeg-7Upgrade libswresample-develUpgrade libavutil-develUpgrade libavutil55Upgrade libavdevice57-32bitUpgrade libpostproc54Upgrade libavformat-develUpgrade libavfilter6-32bitUpgrade libavdevice61Upgrade libpostproc58Upgrade libavcodec-develUpgrade libavcodec61Upgrade libswresample2-32bitUpgrade libswresample2Upgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavcodec57Upgrade ffmpegUpgrade libavresample-develUpgrade libavformat57Upgrade libpostproc-develUpgrade ffmpeg-private-develUpgrade libavdevice57Upgrade libavdevice-develUpgrade libavfilter6Upgrade libavformat57-32bitUpgrade libavfilter10Upgrade libswresample5Upgrade libavresample3-32bitUpgrade libavutil55-32bitUpgrade libavutil59Upgrade libswscale8Upgrade libavresample3 | Dec 5, 2025 | May 5, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Jan 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub