CVE-2025-7700
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Nov 7, 2025
CISA due date
—
The record
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | ffmpeg | 0 | 5.1.7-1.mga9 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | ffmpeg-4 | 0 | 4.4.6-150600.13.30.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | ffmpeg-4 | 0 | 4.4.6-150600.13.33.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.30.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.33.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | ffmpeg-4 | 0 | 4.4.6-150600.13.30.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | ffmpeg-4 | 0 | 4.4.6-150600.13.33.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.30.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | ffmpeg-4 | 0 | 4.4.6-150600.13.33.1 |
| openSUSE:Leap 15.6 | ffmpeg | 0 | 3.4.2-150200.11.67.1 |
| openSUSE:Leap 15.6 | ffmpeg-4 | 0 | 4.4.6-150600.13.30.1 |
| openSUSE:Leap 15.6 | ffmpeg-4 | 0 | 4.4.6-150600.13.33.1 |
| openSUSE:Leap 16.0 | ffmpeg-7 | 0 | 7.1.2-160000.1.1 |
| openSUSE:Tumbleweed | ffmpeg-4 | 0 | 4.4.6-5.1 |
| openSUSE:Tumbleweed | ffmpeg-7 | 0 | 7.1.1-8.1 |
Related vulnerabilities
- CVE-2025-0518 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive… Also affects ffmpeg
- CVE-2023-6604 A flaw was found in FFmpeg. Also affects ffmpeg
- CVE-2023-6605 A flaw was found in FFmpeg's DASH playlist support. Also affects ffmpeg
- CVE-2023-6602 A flaw was found in FFmpeg's TTY Demuxer. Also affects ffmpeg
- CVE-2024-35368 FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within… Also affects ffmpeg
- CVE-2024-35367 FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const… Also affects ffmpeg
- CVE-2024-7055 A vulnerability was found in FFmpeg up to 7.0.1. Also affects ffmpeg
- CVE-2023-51794 Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to… Also affects ffmpeg