CVE-2025-0518

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman
Configurations

Configuration 1 (hide)

cpe:2.3:a:ffmpeg:ffmpeg:7.1:*:*:*:*:*:*:*

History

05 Aug 2025, 19:54

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
Summary
  • (es) La vulnerabilidad de lectura fuera de los límites y valor de retorno sin verificar en FFmpeg permite leer constantes sensibles dentro de un ejecutable. Esta vulnerabilidad está asociada con los archivos de programa https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . Este problema afecta a FFmpeg: 7.1. El problema se solucionó: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a Este problema fue descubierto por: Simcha Kosman
CPE cpe:2.3:a:ffmpeg:ffmpeg:7.1:*:*:*:*:*:*:*
First Time Ffmpeg ffmpeg
Ffmpeg
References () https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a - () https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a - Patch

16 Jan 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-16 17:15

Updated : 2025-08-05 19:54


NVD link : CVE-2025-0518

Mitre link : CVE-2025-0518

CVE.ORG link : CVE-2025-0518


JSON object : View

Products Affected

ffmpeg

  • ffmpeg
CWE
CWE-125

Out-of-bounds Read

CWE-252

Unchecked Return Value