FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 27, 2026 | Jul 27, 2026 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade libavdevice-develUpgrade libavutil55-32bitUpgrade ffmpeg-private-develUpgrade libavutil59Upgrade libswresample5Upgrade ffmpegUpgrade libavdevice57Upgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libswscale8Upgrade libavfilter6Upgrade libpostproc-develUpgrade libavresample3Upgrade libavfilter10Upgrade libavcodec57Upgrade libavformat57Upgrade libavresample-develUpgrade libavutil-develUpgrade libswresample2Upgrade libswresample-develUpgrade libavcodec57-32bitUpgrade libavfilter-develUpgrade libswscale4-32bitUpgrade libpostproc54-32bitUpgrade libavdevice61Upgrade libavformat-develUpgrade libavcodec61Upgrade libavfilter6-32bitUpgrade libpostproc58Upgrade libavcodec-develUpgrade libswscale-develUpgrade libswscale4Upgrade libavdevice57-32bitUpgrade ffmpeg-7Upgrade libavutil55Upgrade libpostproc54Upgrade libswresample2-32bitUpgrade libavformat61 | Dec 5, 2025 | May 5, 2025 |
| Ubuntu | — | Upgrade libavcodec-dev (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 26, 2025 | Jan 3, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub