CVE-2025-25473

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-25473
FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/4f3c9f2f03378a08692a26532bc3146414717f8c..c08d300481b8ebb846cd43a473988fdbc6793d1b:/libavformat/avformat.c
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c08d300481b8ebb846cd43a473988fdbc6793d1b
https://trac.ffmpeg.org/ticket/11419
Configurations

No configuration.

History

16 Dec 2025, 19:15

Type Values Removed Values Added
Summary (en) FFmpeg git master before commit c08d30 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c. (en) FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c.

20 Feb 2025, 22:15

Type Values Removed Values Added
CWE CWE-476
Summary
  • (es) Se descubrió que FFMPEG Git Master antes commit C08D30 contenía un puntero nulo Derferencia a través del componente libavformat/mov.c.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

18 Feb 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-18 23:15

Updated : 2025-12-16 19:15

NVD link : CVE-2025-25473

Mitre link : CVE-2025-25473

CVE.ORG link : CVE-2025-25473

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference