CVE-2025-8586

Katalog CVE

CVSS 3.3 · Low EPSS 0,24%

Kerentanan Improper Resource Shutdown or Release pada libav. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

5 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release
CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.318819 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.621826 advisory pihak ketiga · vdb entry
• https://drive.google.com/file/d/1CX1GZUyJVzyDDGLVa8FG58XUt_30kHKT/view?usp=sharing exploit
• https://trac.ffmpeg.org/ticket/11681 exploit
• https://vuldb.com/?ctiid.318819 permissions required · vdb entry