JLSEC-2025-152 Medium 5.3

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function `iamf_read_header` in...

JLSEC Published: Oct 19, 2025
Modified: Jul 23, 2026
Severity: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Packages: FFMPEG_jll >= 7.1.0+0, < 7.1.1+0
FFplay_jll >= 7.1.0+0, < 7.1.1+0
Upstream: CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.