PT-2025-31951 · Libav · Libav

Published

2025-08-05

·

Updated

2025-08-05

·

CVE-2025-8585

CVSS v3.1
5.3
VectorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

libav versions up to 12.3

Description:

A critical vulnerability exists in libav, specifically within the DSS File Demuxer component. The issue resides in the `main` function of the `/avtools/avconv.c` file and results in a double free condition. Local access is required for exploitation. The exploit for this issue has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Buffer Overflow

Weakness Enumeration

Related Identifiers

CVE-2025-8585

Affected Products

Libav