CVE-2025-63757
High · 7.5CVSS
7.5
EPSS
0.4%
Published
Dec 18, 2025
CISA due date
—
The record
Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.38.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.38.1 |
| openSUSE:Leap 15.6 | ffmpeg-4 | 0 | 4.4.6-150600.13.38.1 |
| openSUSE:Leap 16.0 | ffmpeg-4 | 0 | 4.4.5-bp160.2.1 |
| openSUSE:Tumbleweed | ffmpeg-4 | 0 | 4.4.6-11.1 |
Related vulnerabilities
- CVE-2025-7700 A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for… Also affects ffmpeg-4
- CVE-2023-6601 A flaw was found in FFmpeg's HLS demuxer. Also affects ffmpeg-4
- CVE-2024-36616 An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows… Also affects ffmpeg-4
- CVE-2024-36617 FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. Also affects ffmpeg-4
- CVE-2024-36618 FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which… Also affects ffmpeg-4
- CVE-2025-0518 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive… Also affects ffmpeg-4
- CVE-2024-36613 FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing… Also affects ffmpeg-4
- CVE-2024-35368 FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within… Also affects ffmpeg-4