PT-2025-35577 · Unknown · Rust-Ffmpeg

Zeroy0410 · Published 2025-09-02 · Updated 2025-09-07 · CVE-2025-57613

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rust-ffmpeg version 0.3.0

Description A null pointer dereference issue exists in the input() constructor function. This can lead to a denial of service when the avio alloc context() call fails and returns NULL, which is subsequently dereferenced by the Io struct's Drop implementation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-57613

Affected Products

Rust-Ffmpeg

References · 6

• https://github.com/meh/rust-ffmpeg/issues/192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57613 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57613 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1962931770245935493 · Twitter Post
• https://twitter.com/cracbot/status/1964644886323347673 · Twitter Post
• https://twitter.com/CVEnew/status/1962920233217253518 · Twitter Post