FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Nov 29, 2024 |
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.1Upgrade to FFmpeg version 5.1.7Upgrade to FFmpeg version 6.1.3Upgrade to FFmpeg version 7.0.3 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade ffmpeg-4Upgrade libavformat-develUpgrade libavresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libswscale5_9Upgrade libswscale5_9-32bitUpgrade libpostproc55_9Upgrade libswresample2Upgrade libavformat58_76Upgrade libavutil56_70-32bitUpgrade libavfilter7_110Upgrade libavformat61Upgrade libavresample4_0-32bitUpgrade libavcodec-develUpgrade libswresample2-32bitUpgrade libpostproc54Upgrade libpostproc55_9-32bitUpgrade libswscale4Upgrade libavutil-develUpgrade libavutil55Upgrade libswscale4-32bitUpgrade ffmpeg-4-libavresample-develUpgrade libavformat58_76-32bitUpgrade libswresample-develUpgrade libpostproc54-32bitUpgrade libavfilter6-32bitUpgrade ffmpeg-4-private-develUpgrade ffmpeg-4-libavformat-develUpgrade libavdevice-develUpgrade ffmpeg-4-libavfilter-develUpgrade libavutil56_70Upgrade libswresample3_9-32bitUpgrade libavcodec57-32bitUpgrade libavdevice61Upgrade libavfilter-develUpgrade ffmpeg-7Upgrade ffmpeg-4-libavutil-develUpgrade libpostproc58Upgrade libavcodec61Upgrade ffmpeg-private-develUpgrade libswscale-develUpgrade libswresample5Upgrade libpostproc-develUpgrade libswresample3_9Upgrade libavdevice58_13Upgrade libswscale8Upgrade libavcodec58_134Upgrade libavformat57-32bitUpgrade libavformat57Upgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libavfilter7_110-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libavresample4_0Upgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libavcodec-develUpgrade libavresample3-32bitUpgrade libavfilter6Upgrade libavfilter10Upgrade libavdevice57-32bitUpgrade ffmpegUpgrade libavdevice57Upgrade libavcodec58_134-32bitUpgrade libavcodec57Upgrade libavutil59Upgrade libavresample3Upgrade libavutil55-32bit | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub