PT-2025-45944

Published

2025-10-19

·

Updated

2025-10-19

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2025-151
Found an issue in the description? Have something to add? Feel free to write us 👾