CVE-2025-57616

An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A use-after-free vulnerability in the write_interleaved method allows an attacker to cause a denial of service or memory corruption. The method violates Rust's aliasing rules by modifying a data structure through a mutable pointer while only holding an immutable reference, which can lead to undefined behavior when the data is accessed later.
References
Link Resource
https://github.com/meh/rust-ffmpeg/issues/192 Exploit Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:meh.schizofreni:rust-ffmpeg:0.3.0:*:*:*:*:*:*:*

History

10 Sep 2025, 18:25

Type Values Removed Values Added
References () https://github.com/meh/rust-ffmpeg/issues/192 - () https://github.com/meh/rust-ffmpeg/issues/192 - Exploit, Issue Tracking, Vendor Advisory
First Time Meh.schizofreni rust-ffmpeg
Meh.schizofreni
CPE cpe:2.3:a:meh.schizofreni:rust-ffmpeg:0.3.0:*:*:*:*:*:*:*

03 Sep 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-416

02 Sep 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-02 16:15

Updated : 2025-09-10 18:25


NVD link : CVE-2025-57616

Mitre link : CVE-2025-57616

CVE.ORG link : CVE-2025-57616


JSON object : View

Products Affected

meh.schizofreni

  • rust-ffmpeg
CWE
CWE-416

Use After Free