PT-2025-31951 · Libav · Libav
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8585
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8585
5.3
Medium
Base vector | Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions:
libav versions up to 12.3
Description:
A critical vulnerability exists in libav, specifically within the DSS File Demuxer component. The issue resides in the `main` function of the `/avtools/avconv.c` file and results in a double free condition. Local access is required for exploitation. The exploit for this issue has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Buffer Overflow