PT-2025-45892 · Julia · Ffmpeg Jll

Publicado 2025-10-19 · Atualizado 2025-10-19

OSV

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle open brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

Identificadores relacionados

JLSEC-2025-103

Produtos afetados

Ffmpeg Jll

Referências · 5

• https://github.com/FFmpeg/FFmpeg/commit/273f2755ce8635d42da3cde0eeba15b2e7842774 · Nota
• https://osv.dev/vulnerability/JLSEC-2025-103 · Aviso do Fabricante
• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/894995c41e0795c7a44f81adc4838dedc3932e65 · Nota
• https://usn.ubuntu.com/3967-1 · Nota
• http://securityfocus.com/bid/107384 · Nota