PT-2025-45915 · Julia · Ffmpeg Jll+1

Published 2025-10-19 · Updated 2025-10-19

OSV

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av hwframe ctx init function.

Related Identifiers

JLSEC-2025-125

Affected Products

Ffmpeg Jll

Ffplay Jll

References · 6

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2025-125 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT · Vendor Advisory
• https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7 · Note
• https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179 · Note