VDB
CVE-2025-1594
CVE-2025-1594
PUBLISHED
CVSS 8.699999809265137 HIGH
Das FFmpeg-Projekt besteht aus freien Programmen und Bibliotheken, die es ermöglichen, digitales Video- und Audiomaterial aufzunehmen, zu konvertieren, zu streamen und abzuspielen. Zudem enthält es mit libavcodec eine Audio- und Video-Codec-Sammlung, die verschiedene Codecs zur Verfügung stellt.
EPSS 0.12% · 30.3th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.12%
30.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | |
| Ubuntu | Ubuntu Linux | |
| SUSE | SUSE openSUSE | |
| Open Source | Open Source ffmpeg <=7.1 |
Exploit Intelligence
- https://trac.ffmpeg.org/ticket/11418#comment:3 (nist-nvd)
- https://trac.ffmpeg.org/attachment/ticket/11418/poc (cve.org)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
- owasp-suppressions.xml (github-poc)
Timeline
- Feb 22, 2025 CVE ID Reserved
- Feb 23, 2025 CVE Published
- Feb 24, 2025 EPSS Score
- Feb 24, 2025 CVE Updated
- Mar 4, 2025 Coalition ESS Score
- Mar 10, 2025 EPSS Score
- Mar 24, 2025 EPSS Score
- Apr 7, 2025 EPSS Score
- Apr 22, 2025 EPSS Score
- May 6, 2025 EPSS Score
- May 20, 2025 EPSS Score
- Jun 3, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0429.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0429 advisory
- https://github.com/advisories/GHSA-37pp-xmcw-vg4w advisory
- https://trac.ffmpeg.org/attachment/ticket/11418/poc exploit
- https://ubuntu.com/security/notices/USN-7738-1 advisory
- https://lists.debian.org/debian-security-announce/2025/msg00171.html advisory
- https://lists.debian.org/debian-lts-announce/2026/01/msg00011.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XSCJKF66LTONP72VM5TT4DGXICKOBAGB/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L2TVHM7XOAV45JHZ254UZQQMDW55RPUM/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7NT2CERI46GEPLX7E3HJ5CWXKRBRDN6B/ advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5ETIVB5ZYRWKNJ2IY22K7D5OHJI3VXV/ advisory