PT-2025-31945 · Libav · Libav
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8584
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8584
3.3
Low
Base vector | Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions:
libav versions up to 12.3
Description:
A problematic issue exists in libav due to a null pointer dereference in the `av buffer unref()` function within the `libavutil/buffer.c` file of the AVI File Parser component. Local access is required for exploitation. The details of the issue have been publicly disclosed. This issue affects products that are no longer supported by the maintainer.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
NULL Pointer Dereference