FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Nov 29, 2024 |
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0.3Upgrade to FFmpeg version 6.1.3Upgrade to FFmpeg version 7.1Upgrade to FFmpeg version 5.1.7 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavformat57-32bitUpgrade libavformat57Upgrade libavdevice58_13-32bitUpgrade libswscale8Upgrade libavdevice58_13Upgrade libavcodec58_134Upgrade libswresample3_9Upgrade libavfilter7_110-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libpostproc58Upgrade ffmpegUpgrade ffmpeg-4-libavcodec-develUpgrade libavfilter10Upgrade libavdevice57-32bitUpgrade libavutil59Upgrade libavresample3Upgrade libavutil55-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libavfilter6Upgrade libswresample5Upgrade libswscale-develUpgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavresample3-32bitUpgrade libavcodec58_134-32bitUpgrade libavresample4_0Upgrade libavdevice57Upgrade libavcodec57Upgrade libpostproc-develUpgrade ffmpeg-private-develUpgrade libavcodec61Upgrade libswresample2-32bitUpgrade libavfilter-develUpgrade libavdevice61Upgrade libavformat-develUpgrade ffmpeg-7Upgrade libavdevice-develUpgrade libavformat58_76Upgrade libavutil56_70-32bitUpgrade libswscale5_9-32bitUpgrade libpostproc54-32bitUpgrade libavformat58_76-32bitUpgrade libswresample-develUpgrade ffmpeg-4-libavresample-develUpgrade libpostproc55_9Upgrade libavutil-develUpgrade libavfilter7_110Upgrade libswscale5_9Upgrade libavresample-develUpgrade ffmpeg-4-libavfilter-develUpgrade libswresample3_9-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libavutil56_70Upgrade ffmpeg-4-libswscale-develUpgrade libavcodec57-32bitUpgrade ffmpeg-4Upgrade libavfilter6-32bitUpgrade libavutil55Upgrade libswresample2Upgrade libpostproc55_9-32bitUpgrade libpostproc54Upgrade libavresample4_0-32bitUpgrade libavformat61Upgrade libavcodec-develUpgrade libswscale4-32bitUpgrade libswscale4Upgrade ffmpeg-4-private-devel | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub