CVE-2025-8586: libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ffseekframebinary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8586?
CVE-2025-8586 has been classified as problematic due to its potential to cause application crashes.
How do I fix CVE-2025-8586?
To fix CVE-2025-8586, users should upgrade to a version of libav newer than 12.3.
What component is affected by CVE-2025-8586?
CVE-2025-8586 specifically affects the MPEG File Parser in the libav library.
What kind of vulnerability is CVE-2025-8586?
CVE-2025-8586 is a null pointer dereference vulnerability that can lead to application instability.
Is CVE-2025-8586 present in versions of libav after 12.3?
CVE-2025-8586 is not present in versions of libav released after 12.3.