FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Nov 29, 2024 |
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.1Upgrade to FFmpeg version 5.1.7Upgrade to FFmpeg version 7.0.3Upgrade to FFmpeg version 6.1.3 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavutil59Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-private-develUpgrade libswscale-develUpgrade libavcodec61Upgrade libavdevice58_13Upgrade libswresample3_9Upgrade libswresample5Upgrade libavfilter6Upgrade libavdevice58_13-32bitUpgrade libavformat57Upgrade libavresample3-32bitUpgrade libavformat57-32bitUpgrade libavcodec58_134-32bitUpgrade libavdevice57Upgrade libpostproc58Upgrade libavresample3Upgrade ffmpegUpgrade ffmpeg-4-libavcodec-develUpgrade libavfilter10Upgrade libavdevice57-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavdevice-develUpgrade libpostproc-develUpgrade libavcodec57Upgrade libavutil55-32bitUpgrade libavresample4_0Upgrade libavcodec58_134Upgrade libswscale8Upgrade libavfilter7_110-32bitUpgrade libavformat58_76Upgrade ffmpeg-7Upgrade libavformat58_76-32bitUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libavfilter-develUpgrade libavdevice-develUpgrade ffmpeg-4-libavformat-develUpgrade libavutil56_70Upgrade libavutil56_70-32bitUpgrade libswresample3_9-32bitUpgrade ffmpeg-4Upgrade ffmpeg-4-private-develUpgrade libavfilter6-32bitUpgrade libavcodec57-32bitUpgrade libswscale5_9Upgrade libpostproc55_9Upgrade libavutil-develUpgrade libavfilter7_110Upgrade libavresample-develUpgrade libavformat-develUpgrade libavfilter-develUpgrade libavdevice61Upgrade libavformat61Upgrade libswscale4Upgrade libavresample4_0-32bitUpgrade libswresample2-32bitUpgrade libswscale4-32bitUpgrade libavcodec-develUpgrade libpostproc54Upgrade libpostproc55_9-32bitUpgrade libavutil55Upgrade libswresample2Upgrade libswscale5_9-32bitUpgrade ffmpeg-4-libswscale-develUpgrade libswresample-develUpgrade libpostproc54-32bit | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade libavcodec-dev (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub