CVE-2025-57614: Integer Overflow
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and invalid input vulnerability in the cached method allows an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability occurs when dimension parameters are zero or exceed i32::MAX, leading to an unchecked cast that violates the underlying C function's preconditions and triggers undefined behavior.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57614?
CVE-2025-57614 has a high severity as it can lead to denial of service or potentially arbitrary code execution.
How do I fix CVE-2025-57614?
To fix CVE-2025-57614, upgrade rust-ffmpeg to a version above 0.3.0.
What are the potential impacts of CVE-2025-57614?
The impacts of CVE-2025-57614 include denial of service and possible execution of arbitrary code.
Which versions of rust-ffmpeg are affected by CVE-2025-57614?
rust-ffmpeg version 0.3.0 is affected by CVE-2025-57614.
How can an attacker exploit CVE-2025-57614?
An attacker can exploit CVE-2025-57614 by inputting zero or excessively large dimension parameters into the cached method.