Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in libav ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder nicht näher specifizierte Angriffe durchzuführen, möglicherweise um beliebigen Code auszuführen.
Product
Das Libav-Projekt ist eine Abspaltung von FFmpeg. Es ermöglicht sowie FFmpeg ebenfalls digitales Video- und Audiomaterial aufzunehmen, zu konvertieren, zu streamen und abzuspielen. Zudem enthält es mit libavcodec eine Audio- und Video-Codec-Sammlung, die verschiedene Codecs zur Verfügung stellt.
Vulnerabilities 3
-
Medium 5.3
libav DSS File Demuxer avconv.c main double free
A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a r…
-
Low 3.3
libav AVI File Parser buffer.c av_buffer_unref null pointer dereference
A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local …
-
Low 3.3
libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is p…
Revision history
-
#1
Initiale Fassung
References
-
NIST Vulnerability Database vom 2025-08-05
https://nvd.nist.gov/vuln/detail/CVE-2025-8584
-
NIST Vulnerability Database vom 2025-08-05
https://nvd.nist.gov/vuln/detail/CVE-2025-8585
-
NIST Vulnerability Database vom 2025-08-05
https://nvd.nist.gov/vuln/detail/CVE-2025-8586