PT-2025-31955 · Libav · Libav

Published 2025-08-05 · Updated 2025-08-05 · CVE-2025-8586

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libav versions up to 12.3

Description A problematic issue exists in libav due to a null pointer dereference in the ff seek frame binary function within the /libavformat/utils.c file of the MPEG File Parser component. The issue is exploitable on the local host. The exploit has been publicly disclosed. This issue affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

CVE-2025-8586

Affected Products

Libav

References · 12

• 🔥 https://vuldb.com/?submit.621826 · Exploit
• 🔥 https://trac.ffmpeg.org/ticket/11681 · Exploit
• 🔥 https://drive.google.com/file/d/1CX1GZUyJVzyDDGLVa8FG58XUt_30kHKT/view?usp=sharing · Exploit
• https://ubuntu.com/security/CVE-2025-8586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8586 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-8586 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-8586 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8586 · Vendor Advisory
• https://vuldb.com/?id.318819 · Note
• https://t.me/CVEtracker/29229 · Telegram Post
• https://twitter.com/CVEnew/status/1952791052605104154 · Twitter Post
• https://vuldb.com/?ctiid.318819 · Note