PT-2025-6968 · FFmpeg+6 · Ffmpeg+6

0X20Z · Published 2025-01-02 · Updated 2026-01-12 · CVE-2025-22921

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: FFmpeg git-master, N-113007-g8d24a28d06

Description: A segmentation violation was discovered in the component /libavcodec/jpeg2000dec.c.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-02149

CVE-2025-22921

DLA-4073-1

MGASA-2025-0085

OESA-2025-1771

OESA-2025-1772

OESA-2025-1773

OESA-2025-2027

OESA-2025-2028

OESA-2025-2029

OPENSUSE-SU-2025:14833-1

OPENSUSE-SU-2025:14834-1

OPENSUSE-SU-2025:15010-1

OPENSUSE-SU-2025_0862-1

OPENSUSE-SU-2025_1128-1

OPENSUSE-SU-2025_1450-1

SUSE-SU-2025:0862-1

SUSE-SU-2025:1128-1

SUSE-SU-2025:1450-1

USN-7538-1

Affected Products

Astra Linux

Debian

Ffmpeg

Linuxmint

Red Os

Suse

Ubuntu

References · 115

• https://osv.dev/vulnerability/openSUSE-SU-2025:14834-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-21697 · Security Note
• https://ubuntu.com/security/CVE-2025-22919 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0085.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22043 · Security Note
• https://ubuntu.com/security/CVE-2025-25473 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22037 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-22021 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-22921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7538-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22044 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2027 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-22921 · Vendor Advisory