Summary
Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in
certain error-handling paths of its TensorFlow DNN backend. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 24.04 LTS. (CVE-2025-12343)
Quang Luong discovered that FFmpeg incorrectly handled certain subsample
data. An attacker could possibly use this issue to cause a denial of
service or possibly execute arbitrary code. (CVE-2026-40962)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ffmpeg | 7:4.2.7-0ubuntu0.1+esm13 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ffmpeg | 7:4.4.2-0ubuntu0.22.04.1+esm12 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | ffmpeg | 7:6.1.1-3ubuntu5+esm10 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | ffmpeg | 7:8.0.1-3ubuntu2+esm1 |
Vulnerabilities 2
-
Medium 4.9
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data…
-
Low 3.3
Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend
A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory de…