An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Dec 9, 2024 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 5.1.5Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libswresample-develUpgrade libpostproc58Upgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libavutil55-32bitUpgrade libavcodec57-32bitUpgrade libavcodec61Upgrade libavutil55Upgrade libavresample4_0Upgrade libpostproc54Upgrade ffmpegUpgrade libavformat58_76-32bitUpgrade libavformat61Upgrade libswscale5_9-32bitUpgrade libavutil-develUpgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libavfilter-develUpgrade ffmpeg-4-private-develUpgrade ffmpeg-7Upgrade libpostproc55_9-32bitUpgrade ffmpeg-private-develUpgrade libavutil56_70Upgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libswscale4-32bitUpgrade libavdevice58_13Upgrade libavcodec58_134Upgrade ffmpeg-4-libavutil-develUpgrade libavdevice57-32bitUpgrade libavcodec57Upgrade ffmpeg-4Upgrade libswscale5_9Upgrade libavutil59Upgrade ffmpeg-4-libavcodec-develUpgrade libavresample3Upgrade libswscale8Upgrade libswresample3_9-32bitUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libpostproc55_9Upgrade libavutil56_70-32bitUpgrade libavformat58_76Upgrade libavfilter-develUpgrade libavfilter10Upgrade libswscale4Upgrade libavfilter7_110Upgrade libswresample2Upgrade libswscale-develUpgrade libswresample2-32bitUpgrade libavdevice57Upgrade ffmpeg-4-libavresample-develUpgrade libavresample-develUpgrade libavformat-develUpgrade libswresample3_9Upgrade libavcodec-develUpgrade libavfilter7_110-32bitUpgrade libavfilter6Upgrade libavdevice61Upgrade libavdevice-develUpgrade ffmpeg-4-libpostproc-develUpgrade libswresample5Upgrade libpostproc54-32bitUpgrade libavformat57Upgrade libavresample4_0-32bitUpgrade libavfilter6-32bitUpgrade libavcodec58_134-32bitUpgrade libpostproc-devel | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade libavcodec-dev (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub