CVE-2025-57613: Null Pointer Dereference
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer dereference vulnerability in the input() constructor function allows an attacker to cause a denial of service. The vulnerability is triggered when the avioalloccontext() call fails and returns NULL, which is then stored and later dereferenced by the Io struct's Drop implementation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57613?
CVE-2025-57613 has a severity that may lead to denial of service due to a null pointer dereference.
How do I fix CVE-2025-57613?
To fix CVE-2025-57613, ensure that the avio_alloc_context() call is properly checked for null before use.
Which versions of rust-ffmpeg are affected by CVE-2025-57613?
CVE-2025-57613 affects rust-ffmpeg version 0.3.0.
Can CVE-2025-57613 be exploited remotely?
Yes, CVE-2025-57613 can be exploited remotely, potentially causing denial of service.
What type of vulnerability is CVE-2025-57613?
CVE-2025-57613 is classified as a null pointer dereference vulnerability.