CVE-2025-57614
HIGH EPSS 33.4%
Published Sep 2, 202510mo ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Sep 2, 2025 10mo ago
Last Modified Jun 17, 2026 2w ago
Description
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in the cached method allows an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability occurs when dimension parameters are zero or exceed i32::MAX, leading to an unchecked cast that violates the underlying C function's preconditions and triggers undefined behavior.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
33.4% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-400 Uncontrolled Resource Consumption Resource Mgmt
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| meh.schizofreni | rust-ffmpeg | 0.3.0 | any |
References 1
- github.com https://github.com/meh/rust-ffmpeg/issues/192
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.