CVE-2025-8584
libav AVI File Parser buffer.c av_buffer_unref null pointer dereference
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
libav AVI File Parser buffer.c av_buffer_unref null pointer dereference
A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
In libav bis 12.3 wurde eine problematische Schwachstelle entdeckt. Betroffen ist die Funktion av_buffer_unref der Datei libavutil/buffer.c der Komponente AVI File Parser. Durch Manipulation mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
| 2025-08-05: | Advisory disclosed |
| 2025-08-05: | VulDB entry created |
| 2025-08-05: | VulDB entry last update |
vuldb.com/?id.318817 (VDB-318817 | libav AVI File Parser buffer.c av_buffer_unref null pointer dereference)
vuldb.com/?ctiid.318817 (VDB-318817 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.621824 (Submit #621824 | libav avconv 13 && the newest master Segmentation fault)
trac.ffmpeg.org/ticket/11679
drive.google.com/...FNTDX9afmvez_old3oRC7dM/view?usp=sharing
Support options
