Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-25468 EUVD-2025-4695GHSA-42f6-2hwp-g5qv

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.

Published Feb 18, 2025 · Updated Feb 19, 2025 · Assigned by mitre

Package: ffmpeg-7 Package: ffmpeg-7.1 Package: ffmpeg-7.1-libavdevice61 Package: ffmpeg-7.1-libswscale8 Package: ffmpeg-8.0 Package: libav Ecosystem: Ubuntu Ecosystem: Wolfi

Description

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS libav No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling ffmpeg-7 7.1.3-r0 —
Wolfi rolling ffmpeg-7.1 7.1.3-r2 —
Wolfi rolling ffmpeg-7.1-libswscale8 +1 7.1.5-r2 —
Wolfi rolling ffmpeg-8.0 8.0.1-r3 —

Advisories 1

References