CVE-2025-22919

Name

CVE-2025-22919

Description

A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
cve@mitre.org	https://trac.ffmpeg.org/ticket/11385
af854a3a-2127-422b-91ae-364da2661108	https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html

Match rules

CPE URI	Source package	Min version	Max version
	n/a	== n/a	== n/a

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
ffmpeg	edge-community	8.0-r0	Achill Gilgenast <achill@achill.org>	fixed
ffmpeg	edge-community	7.1.1-r0	Achill Gilgenast <achill@achill.org>	fixed