An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Dec 9, 2024 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0Upgrade to FFmpeg version 5.1.5Upgrade to FFmpeg version 4.3.7 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavformat58_76-32bitUpgrade libavdevice57-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libavresample4_0Upgrade libswresample-develUpgrade libpostproc54Upgrade ffmpegUpgrade libpostproc58Upgrade libavcodec61Upgrade libavutil55Upgrade libswscale5_9Upgrade ffmpeg-4Upgrade libavutil56_70Upgrade libavcodec57-32bitUpgrade libswscale4-32bitUpgrade ffmpeg-4-private-develUpgrade ffmpeg-private-develUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libswscale5_9-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade ffmpeg-7Upgrade libavcodec58_134Upgrade libavdevice58_13Upgrade libavdevice58_13-32bitUpgrade libavcodec57Upgrade ffmpeg-4-libavformat-develUpgrade libavformat61Upgrade ffmpeg-4-libavutil-develUpgrade libpostproc55_9-32bitUpgrade libavutil-develUpgrade libavformat57-32bitUpgrade libavdevice57Upgrade libavresample-develUpgrade libavutil56_70-32bitUpgrade libavformat58_76Upgrade libavfilter-develUpgrade ffmpeg-4-libswscale-develUpgrade libavutil59Upgrade libavformat-develUpgrade libavfilter6-32bitUpgrade libavfilter10Upgrade libswresample3_9Upgrade libavfilter7_110-32bitUpgrade libavcodec-develUpgrade libavdevice-develUpgrade libswresample5Upgrade libavformat57Upgrade ffmpeg-4-libpostproc-develUpgrade libpostproc54-32bitUpgrade libavfilter6Upgrade libavdevice61Upgrade libavfilter7_110Upgrade libswscale-develUpgrade libswresample2Upgrade ffmpeg-4-libswresample-develUpgrade libavresample3Upgrade libswresample3_9-32bitUpgrade libswscale8Upgrade libpostproc-develUpgrade ffmpeg-4-libavcodec-develUpgrade libswscale4Upgrade libavresample4_0-32bitUpgrade libavcodec58_134-32bitUpgrade ffmpeg-4-libavresample-develUpgrade libswresample2-32bitUpgrade libpostproc55_9 | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub