CVE-2025-22921: Null Pointer Dereference
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:7.1.5-0+deb13u1Fixed in 7:9.0.2-4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22921?
CVE-2025-22921 is rated as a high severity vulnerability due to the potential for denial of service through segmentation violations.
How do I fix CVE-2025-22921?
To fix CVE-2025-22921, you should update FFmpeg to the latest stable version that includes patches for this vulnerability.
What components are affected by CVE-2025-22921?
CVE-2025-22921 specifically affects the JPEG 2000 decoder component of FFmpeg.
Can CVE-2025-22921 be exploited remotely?
Yes, CVE-2025-22921 can potentially be exploited remotely if a malicious JPEG 2000 file is processed.
What are the symptoms of CVE-2025-22921 being exploited?
The primary symptom of CVE-2025-22921 being exploited is a segmentation fault leading to application crashes.