Skip to content
OpenAdvisories
High DSA-6079-1 3 CVEs

ffmpeg - security update

Published Dec 10, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 ffmpeg 7:5.1.8-0+deb12u1

Vulnerabilities 3

  • High 7.5
    CVE-2025-63757

    Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.

    ffmpeg ffmpeg libav Debian Ubuntu
  • Medium 6.3
    CVE-2025-1594

    FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow

    A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is po…

    ffmpeg ffmpeg ffmpeg ffmpeg-7 Debian Ubuntu Alpine Wolfi
  • Medium 6.2
    CVE-2024-36618

    FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, p…

    ffmpeg ffmpeg libav Debian Ubuntu