PT-2025-31951 · Libav · Libav

Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-8585

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions libav versions up to 12.3

Description A critical vulnerability exists in libav, specifically within the DSS File Demuxer component. The issue resides in the main function of the /avtools/avconv.c file and results in a double free condition. Local access is required for exploitation. The exploit for this issue has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Double Free

Weakness Enumeration

CWE-119

CWE-415

Related Identifiers

CVE-2025-8585

Affected Products

Libav

References · 12

• 🔥 https://trac.ffmpeg.org/ticket/11680 · Exploit
• 🔥 https://drive.google.com/file/d/1I4VVXGys156UdeSTgya_GGxLZxwuxUPw/view?usp=sharing · Exploit
• 🔥 https://vuldb.com/?submit.621825 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-8585 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8585 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-8585 · Security Note
• https://ubuntu.com/security/CVE-2025-8585 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8585 · Vendor Advisory
• https://twitter.com/CVEnew/status/1952781974667710581 · Twitter Post
• https://vuldb.com/?ctiid.318818 · Note
• https://t.me/CVEtracker/29222 · Telegram Post
• https://vuldb.com/?id.318818 · Note