CVE-2025-1816

MEDIUM EPSS 39.3%

Published Mar 2, 20251y ago · Modified Jun 17, 20262w ago

5.3 CVSS 4.0

Medium

Published Mar 2, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The manipulation of the argument num_parameters leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 0526535cd58444dd264e810b2f3348b4d96cff3b. It is recommended to apply a patch to fix this issue.

CVSS Details

Base Score

5.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

39.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-401

CWE-404

References 7

ffmpeg.org https://ffmpeg.org/
git.ffmpeg.org https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0526535cd58444dd264e810b2f3348b4d96cff3b
trac.ffmpeg.org https://trac.ffmpeg.org/attachment/ticket/11475/poc
trac.ffmpeg.org https://trac.ffmpeg.org/ticket/11475
vuldb.com https://vuldb.com/?ctiid.298089
vuldb.com https://vuldb.com/?id.298089
vuldb.com https://vuldb.com/?submit.506575

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.