A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 21, 2025 | Jul 21, 2025 |
| Suse | — | Upgrade libavformat-develUpgrade ffmpeg-4-private-develUpgrade libavresample-develUpgrade libavutil56_70-32bitUpgrade libavcodec-develUpgrade libavutil56_70Upgrade libavdevice57-32bitUpgrade libavdevice58_13Upgrade ffmpeg-4-libavformat-develUpgrade libavcodec57-32bitUpgrade libavutil55Upgrade libavcodec58_134Upgrade libavfilter6-32bitUpgrade libswresample2Upgrade libswscale4Upgrade libavutil-develUpgrade ffmpeg-4-libavresample-develUpgrade libswresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libavformat58_76-32bitUpgrade libpostproc54Upgrade libswscale5_9-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libswscale5_9Upgrade libswscale4-32bitUpgrade libpostproc55_9-32bitUpgrade libavresample4_0Upgrade libpostproc55_9Upgrade libavfilter-develUpgrade libavfilter7_110Upgrade ffmpeg-4-libavutil-develUpgrade libswresample3_9-32bitUpgrade ffmpeg-private-develUpgrade libpostproc54-32bitUpgrade libavformat57Upgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libavfilter7_110-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavdevice-develUpgrade ffmpeg-4-libpostproc-develUpgrade libavutil55-32bitUpgrade libavcodec58_134-32bitUpgrade libswscale-develUpgrade libswresample3_9Upgrade libavdevice57Upgrade libavformat58_76Upgrade libavformat57-32bitUpgrade libpostproc-develUpgrade libavcodec57Upgrade libavresample3Upgrade ffmpegUpgrade ffmpeg-4Upgrade libswresample2-32bitUpgrade libavdevice-develUpgrade libavresample3-32bitUpgrade libavfilter6Upgrade libavresample4_0-32bit | Dec 5, 2025 | Aug 25, 2025 |
| Ubuntu | — | Upgrade libavcodec61Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavformat61Upgrade ffmpegUpgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec60 (Ubuntu Pro)Upgrade libavformat60 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro) | Oct 22, 2025 | Jul 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub