CVE-2025-57615: Null Pointer Dereference
An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vulnerability in the Vector::new constructor function allows an attacker to cause a denial of service via a null pointer dereference. The vulnerability stems from an unchecked cast of a usize parameter to cint, which can result in a negative value being passed to the underlying C function swsallocVec().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57615?
CVE-2025-57615 has been classified as a denial of service vulnerability due to the potential for null pointer dereference.
How do I fix CVE-2025-57615?
To fix CVE-2025-57615, update the rust-ffmpeg library to a version that addresses the integer overflow issue.
What software is affected by CVE-2025-57615?
CVE-2025-57615 affects rust-ffmpeg version 0.3.0.
What type of vulnerability is CVE-2025-57615?
CVE-2025-57615 is an integer overflow vulnerability that can lead to a denial of service.
Can CVE-2025-57615 be exploited remotely?
Yes, CVE-2025-57615 can be exploited by an attacker to cause a denial of service.