Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-151

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1

JLSEC Published
Modified
Affected Packages
FFMPEG_jll < 7.1.1+0
FFplay_jll < 7.1.1+0
Aliases / Upstream
CVE-2025-1594

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ffaacsearchfortns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References