Skip to content
OpenAdvisories
High · 8.8 CVE-2025-25469 EUVD-2025-4657GHSA-cgf4-78xq-c6wj

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.

Published Feb 18, 2025 · Updated Nov 3, 2026 · Assigned by mitre

Package: ffmpeg-7 Package: ffmpeg-7.1 Package: ffmpeg-7.1-libavdevice61 Package: ffmpeg-7.1-libswscale8 Package: ffmpeg-8.0 Package: libav Ecosystem: Ubuntu Ecosystem: Wolfi

Description

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS libav No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling ffmpeg-7 7.1.3-r0 —
Wolfi rolling ffmpeg-7.1 7.1.3-r2 —
Wolfi rolling ffmpeg-7.1-libswscale8 +1 7.1.5-r2 —
Wolfi rolling ffmpeg-8.0 8.0.1-r3 —

Advisories 1

References