FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jan 6, 2025 | Jan 3, 2025 |
| Ffmpeg | — | Upgrade to FFmpeg version 5.1.5Upgrade to FFmpeg version 7.0Upgrade to FFmpeg version 4.3.7 | Jun 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libpostproc-develUpgrade libavresample4_0Upgrade libavfilter6-32bitUpgrade libavformat57Upgrade libpostproc54-32bitUpgrade libpostproc58Upgrade ffmpeg-4Upgrade libavresample4_0-32bitUpgrade libavcodec58_134-32bitUpgrade libavutil59Upgrade libavdevice-develUpgrade ffmpeg-4-libavformat-develUpgrade libavfilter7_110-32bitUpgrade libavcodec57Upgrade libavformat58_76Upgrade libavutil56_70-32bitUpgrade ffmpeg-4-private-develUpgrade libavfilter6Upgrade ffmpeg-4-libavdevice-develUpgrade libavdevice58_13-32bitUpgrade libpostproc-develUpgrade libavdevice61Upgrade libavresample3Upgrade libavdevice57-32bitUpgrade libswresample2-32bitUpgrade libswscale5_9-32bitUpgrade libavfilter10Upgrade libavdevice57Upgrade libavformat57-32bitUpgrade ffmpeg-4-libavutil-develUpgrade libswresample5Upgrade libswscale8Upgrade libswresample3_9Upgrade ffmpeg-4-libswscale-develUpgrade libswresample2Upgrade ffmpeg-4-libavfilter-develUpgrade libavformat-develUpgrade libavcodec61Upgrade libswresample3_9-32bitUpgrade libpostproc55_9-32bitUpgrade libavutil-develUpgrade libavresample3-32bitUpgrade ffmpegUpgrade libpostproc54Upgrade libavdevice58_13Upgrade ffmpeg-private-develUpgrade libavfilter-develUpgrade libavutil56_70Upgrade libswscale-develUpgrade libavcodec57-32bitUpgrade libavutil55Upgrade libswscale4-32bitUpgrade libavcodec58_134Upgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-7Upgrade libswresample-develUpgrade libavcodec-develUpgrade libswscale4Upgrade libswscale5_9Upgrade libavresample-develUpgrade libavformat58_76-32bitUpgrade libavfilter7_110Upgrade ffmpeg-4-libswresample-develUpgrade libpostproc55_9Upgrade libavutil55-32bitUpgrade libavformat61 | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade libavcodec-dev (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 26, 2025 | Jan 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub