VDB
CNVD-2025-01685
CNVD-2025-01685
PUBLISHED
CVSS 6.199999809265137 MEDIUM
FFmpeg是FFmpeg团队的一套可录制、转换以及流化音视频的完整解决方案。 FFmpeg n6.1.1版本存在安全漏洞，攻击者可利用该漏洞导致拒绝服务(DoS)。
Risk Scores
CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
Timeline
- Nov 29, 2024 CVE Published
- Nov 29, 2024 PoC Published
- Oct 16, 2025 PoC Published
References
- https://github.com/ffmpeg/ffmpeg/commit/7a089ed8e049e3bfcb22de1250b86f2106060857 url
- https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/avidec.c#L1699 url
- https://gist.github.com/1047524396/a148f3679415a6da53ca112eb2ba1523 url
- https://lists.debian.org/debian-lts-announce/2025/02/msg00000.html url