CVE-2025-57612: Null Pointer Dereference
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the name() method allows an attacker to cause a denial of service. The vulnerability exists because the method fails to check for a NULL return value from the avgetsamplefmtname() C function, which can be triggered by providing an unrecognized sample format.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57612?
CVE-2025-57612 is classified as a denial of service vulnerability due to a null pointer dereference.
How do I fix CVE-2025-57612?
To mitigate CVE-2025-57612, update to a patched version of rust-ffmpeg that addresses the null pointer dereference issue.
What causes CVE-2025-57612?
CVE-2025-57612 is caused by the name() method not checking for a NULL return value from the av_get_sample_fmt_name() function.
Which versions of rust-ffmpeg are affected by CVE-2025-57612?
CVE-2025-57612 affects rust-ffmpeg version 0.3.0 after commit 5ac0527.
What are the potential impacts of CVE-2025-57612?
The potential impact of CVE-2025-57612 is denial of service, which can disrupt the availability of applications using the affected library.