Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-12343 EUVD-2025-207797GHSA-2g52-f4rf-8vm9

Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend

Published Feb 18, 2026 · Updated Feb 25, 2026 · Assigned by fedora

Description

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.

Affected products

VendorProductAffectedFixed
— ffmpeg 6.1 – < 8.1 8.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 ffmpeg 7:7.1.2-1 —
Debian 13 ffmpeg 7:7.1.2-0+deb13u1 DSA-6007-1
ReleasePackageFixed inAdvisory
Ubuntu 26.10 ffmpeg No fix yet —
Ubuntu 25.10 ffmpeg No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS ffmpeg 7:8.0.1-3ubuntu2+esm1 USN-8469-1
Ubuntu Pro 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm10 USN-8469-1
Ubuntu Pro 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm12 USN-8469-1
Ubuntu Pro 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm13 USN-8469-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling ffmpeg-7 +2 No fix yet —

Advisories 3

References