Logo
›
›vulnerability›CVE-2025-0518
Name
CVE-2025-0518
Source
NVD ( link)Debian ( link)
Description
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman
CWEs
CWE-125
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38aPatch

Analysis#

Affected Component
Analysis
ffmpeg
Patched

Vulnerability Ratings#

4.8
CVSSv4
5.3
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
ffmpeg
buildroot
2025.02.x
6.1.5
Not Affected
ffmpeg
buildroot
master
6.1.5
Not Affected
ffmpeg
openwrt
master
6.1.4-r2
Not Affected
ffmpeg
openwrt
openwrt-25.12
6.1.4-r1
Not Affected
ffmpeg
yocto
master
8.1.1
Not Affected
ffmpeg
yocto
scarthgap
6.1.4
Not Affected

Resolved with patches#

ffmpeg (yocto:kirkstone)

#
Title
Author
Resolve
1
avfilter/af_pan: Fix sscanf() use
Michael Niedermayer <michael@niedermayer.cc>
CVE-2025-0518