CVE-2025-25467
CVE-2025-25467
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.
CVSS 9.8 · Critical · EPSS 0.7%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
x264 Debian:12
- Versions
- 2:0.164.3095+gitbaee400-3
- 2:0.164.3108+git31e19f9-1
- 2:0.164.3108+git31e19f9-2
- 2:0.164.3108+git31e19f9-3
- 2:0.165.3222+gitb35605ac-1
- 2:0.165.3222+gitb35605ac-2
- 2:0.165.3222+gitb35605ac-3
- 2:0.165.3223+git20250910.0480cb0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Debian:13
- Versions
- 2:0.164.3108+git31e19f9-2
- 2:0.164.3108+git31e19f9-3
- 2:0.165.3222+gitb35605ac-1
- 2:0.165.3222+gitb35605ac-2
- 2:0.165.3222+gitb35605ac-3
- 2:0.165.3223+git20250910.0480cb0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Debian:14
- Versions
- 2:0.164.3108+git31e19f9-2
- 2:0.164.3108+git31e19f9-3
- 2:0.165.3222+gitb35605ac-1
- 2:0.165.3222+gitb35605ac-2
- 2:0.165.3222+gitb35605ac-3
- 2:0.165.3223+git20250910.0480cb0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libav Ubuntu:Pro:14.04:LTS
- Versions
- 6:0.8.7-1ubuntu2
- 6:9.10-1ubuntu1
- 6:9.10-1ubuntu2
- 6:9.10-1ubuntu5
- 6:9.10-1ubuntu6
- 6:9.10-1ubuntu7
- 6:9.11-2ubuntu1
- 6:9.11-2ubuntu2
- 6:9.13-0ubuntu0.14.04.1
- 6:9.14-0ubuntu0.14.04.1
- 6:9.16-0ubuntu0.14.04.1
- 6:9.18-0ubuntu0.14.04.1
- 6:9.20-0ubuntu0.14.04.1
- 6:9.20-0ubuntu0.14.04.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:14.04:LTS
- Versions
- 2:0.123.2189+git35cf912-1ubuntu1
- 2:0.123.2189+git35cf912-1ubuntu2
- 2:0.123.2189+git35cf912-1ubuntu3
- 2:0.123.2189+git35cf912-1ubuntu4
- 2:0.142.2389+git956c8d8-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:16.04:LTS
- Versions
- 7:2.7.2-1build1
- 7:2.8.1-1ubuntu1
- 7:2.8.2-1ubuntu1
- 7:2.8.3-1
- 7:2.8.4-1
- 7:2.8.4-1ubuntu1
- 7:2.8.4-1ubuntu2
- 7:2.8.4-1ubuntu3
- 7:2.8.4-1ubuntu4
- 7:2.8.6-1ubuntu1
- 7:2.8.6-1ubuntu2
- 7:2.8.8-0ubuntu0.16.04.1
- 7:2.8.10-0ubuntu0.16.04.1
- 7:2.8.11-0ubuntu0.16.04.1
- 7:2.8.14-0ubuntu0.16.04.1
- 7:2.8.15-0ubuntu0.16.04.1
- 7:2.8.15-0ubuntu0.16.04.1+esm1
- 7:2.8.17-0ubuntu0.1
- 7:2.8.17-0ubuntu0.1+esm1
- 7:2.8.17-0ubuntu0.1+esm2
- 7:2.8.17-0ubuntu0.1+esm3
- 7:2.8.17-0ubuntu0.1+esm4
- 7:2.8.17-0ubuntu0.1+esm5
- 7:2.8.17-0ubuntu0.1+esm6
- 7:2.8.17-0ubuntu0.1+esm7
- 7:2.8.17-0ubuntu0.1+esm8
- 7:2.8.17-0ubuntu0.1+esm9
- 7:2.8.17-0ubuntu0.1+esm10
- 7:2.8.17-0ubuntu0.1+esm11
- 7:2.8.17-0ubuntu0.1+esm12
- 7:2.8.17-0ubuntu0.1+esm13
- 7:2.8.17-0ubuntu0.1+esm14
- 7:2.8.17-0ubuntu0.1+esm15
- 7:2.8.17-0ubuntu0.1+esm16
- 7:2.8.17-0ubuntu0.1+esm17
- 7:2.8.17-0ubuntu0.1+esm18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:16.04:LTS
- Versions
- 2:0.146.2555+git0c21480-1
- 2:0.148.2601+gita0cd7d3-3
- 2:0.148.2643+git5c65704-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:18.04:LTS
- Versions
- 7:3.3.4-2
- 7:3.3.4-2build3
- 7:3.4-2ubuntu2
- 7:3.4-4
- 7:3.4-4build1
- 7:3.4.1-1
- 7:3.4.1-1build1
- 7:3.4.2-1
- 7:3.4.2-1build1
- 7:3.4.2-2
- 7:3.4.4-0ubuntu0.18.04.1
- 7:3.4.6-0ubuntu0.18.04.1
- 7:3.4.8-0ubuntu0.2
- 7:3.4.11-0ubuntu0.1
- 7:3.4.11-0ubuntu0.1+esm1
- 7:3.4.11-0ubuntu0.1+esm2
- 7:3.4.11-0ubuntu0.1+esm3
- 7:3.4.11-0ubuntu0.1+esm4
- 7:3.4.11-0ubuntu0.1+esm5
- 7:3.4.11-0ubuntu0.1+esm6
- 7:3.4.11-0ubuntu0.1+esm7
- 7:3.4.11-0ubuntu0.1+esm8
- 7:3.4.11-0ubuntu0.1+esm9
- 7:3.4.11-0ubuntu0.1+esm10
- 7:3.4.11-0ubuntu0.1+esm11
- 7:3.4.11-0ubuntu0.1+esm12
- 7:3.4.11-0ubuntu0.1+esm13
- 7:3.4.11-0ubuntu0.1+esm14
- 7:3.4.11-0ubuntu0.1+esm15
- 7:3.4.11-0ubuntu0.1+esm16
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:18.04:LTS
- Versions
- 2:0.148.2795+gitaaa9aa8-1
- 2:0.152.2854+gite9a5903-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:20.04:LTS
- Versions
- 7:4.1.4-1build2
- 7:4.2.1-2
- 7:4.2.1-2ubuntu1
- 7:4.2.2-1build1
- 7:4.2.2-1ubuntu1
- 7:4.2.4-1ubuntu0.1
- 7:4.2.4-1ubuntu0.1+esm1
- 7:4.2.7-0ubuntu0.1
- 7:4.2.7-0ubuntu0.1+esm1
- 7:4.2.7-0ubuntu0.1+esm2
- 7:4.2.7-0ubuntu0.1+esm3
- 7:4.2.7-0ubuntu0.1+esm4
- 7:4.2.7-0ubuntu0.1+esm5
- 7:4.2.7-0ubuntu0.1+esm6
- 7:4.2.7-0ubuntu0.1+esm7
- 7:4.2.7-0ubuntu0.1+esm8
- 7:4.2.7-0ubuntu0.1+esm9
- 7:4.2.7-0ubuntu0.1+esm10
- 7:4.2.7-0ubuntu0.1+esm11
- 7:4.2.7-0ubuntu0.1+esm12
- 7:4.2.7-0ubuntu0.1+esm13
- 7:4.2.7-0ubuntu0.1+esm14
- 7:4.2.7-0ubuntu0.1+esm15
- 7:4.2.7-0ubuntu0.1+esm16
- 7:4.2.7-0ubuntu0.1+esm17
- 7:4.2.7-0ubuntu0.1+esm18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:20.04:LTS
- Versions
- 2:0.155.2917+git0a84d98-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:22.04:LTS
- Versions
- 2:0.160.3011+gitcde9a93-2.1
- 2:0.160.3011+gitcde9a93-2.1build1
- 2:0.163.3060+git5db6aa6-2
- 2:0.163.3060+git5db6aa6-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:22.04:LTS
- Versions
- 7:4.4-6ubuntu5
- 7:4.4.1-2ubuntu1
- 7:4.4.1-3ubuntu1
- 7:4.4.1-3ubuntu2
- 7:4.4.1-3ubuntu3
- 7:4.4.1-3ubuntu5
- 7:4.4.2-0ubuntu0.22.04.1
- 7:4.4.2-0ubuntu0.22.04.1+esm1
- 7:4.4.2-0ubuntu0.22.04.1+esm2
- 7:4.4.2-0ubuntu0.22.04.1+esm3
- 7:4.4.2-0ubuntu0.22.04.1+esm4
- 7:4.4.2-0ubuntu0.22.04.1+esm5
- 7:4.4.2-0ubuntu0.22.04.1+esm6
- 7:4.4.2-0ubuntu0.22.04.1+esm7
- 7:4.4.2-0ubuntu0.22.04.1+esm8
- 7:4.4.2-0ubuntu0.22.04.1+esm9
- 7:4.4.2-0ubuntu0.22.04.1+esm10
- 7:4.4.2-0ubuntu0.22.04.1+esm11
- 7:4.4.2-0ubuntu0.22.04.1+esm12
- 7:4.4.2-0ubuntu0.22.04.1+esm13
- 7:4.4.2-0ubuntu0.22.04.1+esm14
- 7:4.4.2-0ubuntu0.22.04.1+esm15
- 7:4.4.2-0ubuntu0.22.04.1+esm16
- 7:4.4.2-0ubuntu0.22.04.1+esm17
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:24.04:LTS
- Versions
- 2:0.164.3095+gitbaee400-3build1
- 2:0.164.3108+git31e19f9-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:24.04:LTS
- Versions
- 7:6.0-6ubuntu1
- 7:6.0-9ubuntu1
- 7:6.1-2ubuntu1
- 7:6.1-3ubuntu1
- 7:6.1-4ubuntu1
- 7:6.1-5ubuntu1
- 7:6.1.1-1ubuntu1
- 7:6.1.1-3ubuntu1
- 7:6.1.1-3ubuntu5
- 7:6.1.1-3ubuntu5+esm1
- 7:6.1.1-3ubuntu5+esm2
- 7:6.1.1-3ubuntu5+esm3
- 7:6.1.1-3ubuntu5+esm4
- 7:6.1.1-3ubuntu5+esm5
- 7:6.1.1-3ubuntu5+esm6
- 7:6.1.1-3ubuntu5+esm7
- 7:6.1.1-3ubuntu5+esm8
- 7:6.1.1-3ubuntu5+esm10
- 7:6.1.1-3ubuntu5+esm11
- 7:6.1.1-3ubuntu5+esm12
- 7:6.1.1-3ubuntu5+esm13
- 7:6.1.1-3ubuntu5+esm15
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:25.10
- Versions
- 7:7.1.1-1ubuntu1
- 7:7.1.1-1ubuntu2
- 7:7.1.1-1ubuntu3
- 7:7.1.1-1ubuntu4
- 7:7.1.1-1ubuntu4.1
- 7:7.1.1-1ubuntu4.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:25.10
- Versions
- 2:0.164.3108+git31e19f9-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:26.10
- Versions
- 7:8.0.1-3ubuntu2
- 7:8.1-3ubuntu3
- 7:8.1.2-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:26.10
- Versions
- 2:0.165.3222+gitb35605ac-3build1
- 2:0.165.3223+git20250910.0480cb0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x264 Ubuntu:26.04:LTS
- Versions
- 2:0.164.3108+git31e19f9-2build2
- 2:0.165.3222+gitb35605ac-3
- 2:0.165.3222+gitb35605ac-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ffmpeg Ubuntu:Pro:26.04:LTS
- Versions
- 7:7.1.1-1ubuntu4
- 7:7.1.2-1ubuntu3
- 7:7.1.2-1ubuntu4
- 7:7.1.3-1ubuntu1
- 7:8.0.1-2ubuntu1
- 7:8.0.1-3ubuntu1
- 7:8.0.1-3ubuntu2
- 7:8.0.1-3ubuntu2+esm1
- 7:8.0.1-3ubuntu2+esm3
- 7:8.0.1-3ubuntu2+esm4
- 7:8.0.1-3ubuntu2+esm5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published