FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Nov 29, 2024 |
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.1Upgrade to FFmpeg version 5.1.7Upgrade to FFmpeg version 7.0.3Upgrade to FFmpeg version 6.1.3 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade ffmpeg-4-libpostproc-develUpgrade libswresample5Upgrade libavresample4_0Upgrade libavdevice57Upgrade ffmpeg-4-libavdevice-develUpgrade libavdevice58_13Upgrade libavcodec57Upgrade libavcodec58_134-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libswresample3_9Upgrade libavresample3-32bitUpgrade libavfilter7_110-32bitUpgrade libswscale8Upgrade libavutil55-32bitUpgrade libavutil59Upgrade libavfilter6Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-private-develUpgrade libavcodec61Upgrade libswscale-develUpgrade ffmpeg-4-libavcodec-develUpgrade libavdevice57-32bitUpgrade ffmpegUpgrade libavcodec58_134Upgrade libavformat57-32bitUpgrade libavfilter10Upgrade libpostproc-develUpgrade libavresample3Upgrade libavdevice58_13-32bitUpgrade libavformat57Upgrade libpostproc58Upgrade ffmpeg-4-libavresample-develUpgrade libavcodec57-32bitUpgrade libavutil-develUpgrade libavfilter7_110Upgrade libavdevice-develUpgrade libswresample3_9-32bitUpgrade libavutil56_70Upgrade libavformat61Upgrade libavcodec-develUpgrade libswresample2-32bitUpgrade libavresample4_0-32bitUpgrade libswscale4Upgrade libswscale4-32bitUpgrade libpostproc55_9Upgrade ffmpeg-4-libavformat-develUpgrade libpostproc55_9-32bitUpgrade libswresample2Upgrade libpostproc54Upgrade libswresample-develUpgrade libpostproc54-32bitUpgrade libavutil55Upgrade ffmpeg-7Upgrade libavresample-develUpgrade libavformat-develUpgrade libavfilter-develUpgrade libavdevice61Upgrade libavformat58_76-32bitUpgrade ffmpeg-4Upgrade ffmpeg-4-private-develUpgrade libavfilter6-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libavformat58_76Upgrade ffmpeg-4-libswscale-develUpgrade libswscale5_9-32bitUpgrade libavutil56_70-32bitUpgrade libswscale5_9 | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub