Skip to content
OpenAdvisories
High · 7.5 CVE-2025-57615 EUVD-2025-26409GHSA-wv74-xf96-v6rg

An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor functio…

Published Sep 2, 2025 · Updated Sep 3, 2025 · Assigned by mitre

Description

An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor function allows an attacker to cause a denial of service via a null pointer dereference. The vulnerability stems from an unchecked cast of a usize parameter to c_int, which can result in a negative value being passed to the underlying C function sws_allocVec().

References