CVE-2025-1594 — FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow

Affected: FFmpeg

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

USN-7738-1 — ffmpeg vulnerability

Affected: Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg

It was discovered that FFmpeg incorrectly handled the calculation of LPC order, which could lead to a stack-based buffer overflow. An attacker could possibly use this issue to cause FFmpeg to crash, resulting in a denial of service.

Most recent entries from all

CVE-2025-1594 — FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow

USN-7738-1 — ffmpeg vulnerability