CVE-2025-1373

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 7.1

Description: A problem has been found in the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations: For FFmpeg versions prior to 7.1, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the mov read trak function of the MOV Parser component until a patch is available.