CVE-2025-59730
CVE-2025-59730 · Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution (width x height). A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame contents using a run-length encoding algorithm. There are no checks that the decoded frame fits in the allocated buffer, leading to a heap-buffer-overflow. process_frame_obj initializes the buffers based on the frame resolution: We recommend upgrading to version 8.0 or beyond.
CVSS 5.7 · Moyenne · EPSS 0,2%
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
ffmpeg
- Versions du logiciel
- ≥ 829680f96a7a7ff02d1543895ec0fb713309d5c0, < 8.0: Concernée (custom)
Aucun correctif publié
libav Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 6:0.8.7-1ubuntu2
- 6:9.10-1ubuntu1
- 6:9.10-1ubuntu2
- 6:9.10-1ubuntu5
- 6:9.10-1ubuntu6
- 6:9.10-1ubuntu7
- 6:9.11-2ubuntu1
- 6:9.11-2ubuntu2
- 6:9.13-0ubuntu0.14.04.1
- 6:9.14-0ubuntu0.14.04.1
- 6:9.16-0ubuntu0.14.04.1
- 6:9.18-0ubuntu0.14.04.1
- 6:9.20-0ubuntu0.14.04.1
- 6:9.20-0ubuntu0.14.04.1+esm1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié