Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Dec 22, 2025 | Dec 22, 2025 |
| Ffmpeg | — | Upgrade to FFmpeg version 8.0.1 | Dec 18, 2025 | Dec 18, 2025 |
| Ubuntu | — | Upgrade libavformat61Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavcodec61Upgrade ffmpegUpgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavformat60 (Ubuntu Pro)Upgrade libavcodec60 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro) | Jan 29, 2026 | Dec 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub