CVE-2025-59734

Name of the Vulnerable Software and Affected Versions versions prior to 8.0

Description A crafted animation can trigger a use-after-free write during SANM decoding. This occurs when a STOR chunk is followed by an FOBJ chunk, and the frame has an invalid size. The code attempts to decode a frame object again, potentially reallocating a buffer while a GetByteContext object still holds a reference to the old buffer. This can lead to a use-after-free read when codecs use the GetByteContext object, and potentially corrupt allocator metadata by writing to freed data. The issue can be triggered by simply probing a file for the SANM format.

Recommendations Upgrade to version 8.0 or beyond.