Description
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ffmpeg | 7:2.4.1-1 | — |
| Debian 13 | ffmpeg | 7:2.4.1-1 | — |
| Debian 12 | ffmpeg | 7:2.4.1-1 | — |
| Debian 6.0 | ffmpeg | 4:0.5.10-1 | DSA-2624-1 |
Advisories 1
- DSA-2624-1 ffmpeg - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- [oss-security] 20120902 Re: Information on security issues fixed in ffmpeg 0.11? mailing-list
- http://libav.org/releases/libav-0.8.5.changelog
- 55355 vdb-entry
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=951cbea56fdc03ef96d07fbd7e5bed755d42ac8a
- [oss-security] 20120831 Information on security issues fixed in ffmpeg 0.11? mailing-list
- USN-1706-1 vendor-advisory
- http://ffmpeg.org/security.html
- http://libav.org/releases/libav-0.7.7.changelog
- USN-1705-1 vendor-advisory
- 50468 third-party-advisory