CVE-2025-22921

MEDIUM EPSS 26.2%
Published Feb 18, 20251y ago · Modified Jun 17, 20261w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Feb 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
26.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 14

VendorProductVersionRange
ffmpegffmpeg7.0any
ffmpegffmpeg7.0.1any
ffmpegffmpeg7.0.2any
ffmpegffmpeg7.0.3any
ffmpegffmpeg7.1any
ffmpegffmpeg7.1any
ffmpegffmpeg7.1.1any
ffmpegffmpeg7.1.2any
ffmpegffmpeg7.1.3any
ffmpegffmpeg7.2any
ffmpegffmpeg8.0any
ffmpegffmpeg8.0.1any
ffmpegffmpeg8.1any
debiandebian_linux11.0any

References 2

  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html
    Mailing List
  • trac.ffmpeg.org https://trac.ffmpeg.org/ticket/11393
    Issue Tracking

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.