vulnerability
Debian: CVE-2025-9951: ffmpeg -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:S/C:N/I:C/A:C) | Dec 18, 2025 | Dec 18, 2025 | Jan 19, 2026 |
Severity
8
CVSS
(AV:N/AC:M/Au:S/C:N/I:C/A:C)
Published
Dec 18, 2025
Added
Dec 18, 2025
Modified
Jan 19, 2026
Description
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.
Solution
debian-upgrade-ffmpeg
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.