CVE-2025-8586
libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
Es wurde eine problematische Schwachstelle in libav bis 12.3 gefunden. Betroffen hiervon ist die Funktion ff_seek_frame_binary der Datei /libavformat/utils.c der Komponente MPEG File Parser. Mittels Manipulieren mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Der Exploit steht zur öffentlichen Verfügung.
| 2025-08-05: | Advisory disclosed |
| 2025-08-05: | VulDB entry created |
| 2025-08-05: | VulDB entry last update |
vuldb.com/?id.318819 (VDB-318819 | libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference)
vuldb.com/?ctiid.318819 (VDB-318819 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.621826 (Submit #621826 | libav avconv 13 && the newest master Segmentation fault)
trac.ffmpeg.org/ticket/11681
drive.google.com/...zyDDGLVa8FG58XUt_30kHKT/view?usp=sharing
Support options
