CVE-2025-22919: Medium severity FFmpeg FFmpeg vulnerability
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.9-0+deb12u1Fixed in 7:7.1.5-0+deb13u1Fixed in 7:9.0.2-4 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 7.1.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22919?
CVE-2025-22919 is classified as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2025-22919?
To fix CVE-2025-22919, update to the latest version of FFmpeg that addresses this vulnerability.
What does CVE-2025-22919 affect?
CVE-2025-22919 affects the FFmpeg software, specifically versions around the git-master commit N-113007-g8d24a28d06.
How does CVE-2025-22919 work?
CVE-2025-22919 allows attackers to cause a Denial of Service by opening a crafted AAC file.
Is CVE-2025-22919 easy to exploit?
Yes, CVE-2025-22919 can be exploited easily by opening a specially crafted AAC file.