FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jan 6, 2025 | Jan 3, 2025 |
| Ffmpeg | — | Upgrade to FFmpeg version 5.1.5Upgrade to FFmpeg version 7.0Upgrade to FFmpeg version 4.3.7 | Jun 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade ffmpeg-4-libavformat-develUpgrade libavdevice-develUpgrade libavdevice57-32bitUpgrade libpostproc-develUpgrade libavformat58_76Upgrade libpostproc54-32bitUpgrade libswresample5Upgrade libswscale8Upgrade libavcodec57Upgrade libpostproc58Upgrade libavfilter6Upgrade libavresample4_0Upgrade libavformat57Upgrade ffmpeg-4Upgrade libavutil56_70-32bitUpgrade libavutil59Upgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavdevice58_13-32bitUpgrade libavcodec58_134-32bitUpgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-private-develUpgrade libswscale5_9-32bitUpgrade libavfilter10Upgrade libavfilter7_110-32bitUpgrade libavdevice61Upgrade libswresample2-32bitUpgrade libavfilter6-32bitUpgrade libswresample3_9Upgrade libavdevice57Upgrade libavresample3Upgrade libavformat57-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libswscale-develUpgrade libavresample4_0-32bitUpgrade libavutil56_70Upgrade libavutil-develUpgrade libswscale5_9Upgrade ffmpeg-4-libavfilter-develUpgrade libpostproc54Upgrade libavformat-develUpgrade libavcodec61Upgrade libavcodec-develUpgrade libswresample-develUpgrade libpostproc55_9-32bitUpgrade libswresample3_9-32bitUpgrade libavresample3-32bitUpgrade libavformat61Upgrade ffmpeg-7Upgrade libavformat58_76-32bitUpgrade libavfilter7_110Upgrade libavresample-develUpgrade ffmpeg-private-develUpgrade libswscale-develUpgrade libavcodec57-32bitUpgrade libswscale4Upgrade ffmpeg-4-libswresample-develUpgrade libavutil55-32bitUpgrade ffmpeg-4-libavresample-develUpgrade libswscale4-32bitUpgrade libavutil55Upgrade ffmpegUpgrade libpostproc55_9Upgrade libavcodec58_134Upgrade libswresample2Upgrade libavfilter-develUpgrade libavdevice58_13 | Dec 5, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Jan 3, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub