PT-2025-45944 · Julia · Ffmpeg Jll+1

Published

2025-10-19

·

Updated

2025-10-19

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2025-151

Affected Products

Ffmpeg Jll
Ffplay Jll