Skip to content
OpenAdvisories
Medium USN-7871-1 1 CVE

ffmpeg vulnerability

Published Nov 16, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FFmpeg incorrectly handled memory allocation in the
ALS audio decoder. If a user was tricked into loading a crafted media file,
a remote attacker could possibly use this issue to make FFmpeg crash,
resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.10 ffmpeg 7:7.1.1-1ubuntu4.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-7700

    Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)

    A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it …

    ffmpeg ffmpeg libav Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-7700