Skip to content
OpenAdvisories
Unscored USN-7982-1 0 CVEs

ffmpeg vulnerabilities

Published Jan 27, 2026 · Updated Jun 25, 2026

Summary

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10.
(CVE-2025-59728)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-59731,
CVE-2025-59732)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS
and Ubuntu 25.10. (CVE-2025-59733)

It was discovered that FFmpeg did not correctly handle certain integer
arithmetic operations. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. (CVE-2025-63757)

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 25.10 ffmpeg 7:7.1.1-1ubuntu4.2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ffmpeg 7:2.8.17-0ubuntu0.1+esm14
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS ffmpeg 7:3.4.11-0ubuntu0.1+esm12
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm12
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm11
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS ffmpeg 7:6.1.1-3ubuntu5+esm7

References

  • report
    https://ubuntu.com/security/CVE-2025-59728
  • report
    https://ubuntu.com/security/CVE-2025-59731
  • report
    https://ubuntu.com/security/CVE-2025-59732
  • report
    https://ubuntu.com/security/CVE-2025-59733
  • report
    https://ubuntu.com/security/CVE-2025-63757