VDB
JLSEC-2025-137
JLSEC-2025-137
PUBLISHED
CVSS 6.199999809265137 MEDIUM
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an...
Risk Scores
CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | FFMPEG_jll | 6.1.1+0, 6.1.1+0 |
| Julia | FFMPEG_jll | 6.1.1+0 |
Timeline
- Oct 19, 2025 CVE Published
- Jul 23, 2026 CVE Updated
References
- https://gist.github.com/1047524396/a148f3679415a6da53ca112eb2ba1523 url
- https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/avidec.c#L1699 url
- https://github.com/ffmpeg/ffmpeg/commit/7a089ed8e049e3bfcb22de1250b86f2106060857 url
- https://lists.debian.org/debian-lts-announce/2025/02/msg00000.html url