CVE-2025-1594: FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ffaacsearchfortns of the file libavcodec/aacenctns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1594?
CVE-2025-1594 is classified as critical due to the potential for a stack-based buffer overflow.
How do I fix CVE-2025-1594?
To mitigate CVE-2025-1594, upgrade FFmpeg to a version greater than 7.1.
What component is affected by CVE-2025-1594?
CVE-2025-1594 affects the AAC Encoder component in FFmpeg.
What is the exploitation impact of CVE-2025-1594?
Exploitation of CVE-2025-1594 can lead to arbitrary code execution due to stack-based buffer overflow.
Which versions of FFmpeg are vulnerable to CVE-2025-1594?
FFmpeg versions up to and including 7.1 are vulnerable to CVE-2025-1594.