CVE catalog

CVE-2025-7700

FFmpeg vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianffmpegsid7:9.0.2-4fixed
Debianffmpegforky7:9.0.2-4fixed
Debianffmpegtrixie7:7.1.5-0+deb13u1fixed
Debianffmpegtrixie-security7:7.1.5-0+deb13u1fixed
Debianffmpegbookworm7:5.1.9-0+deb12u1fixed
Debianffmpegbookworm-security7:5.1.9-0+deb12u1fixed
Ubuntuffmpegnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntuffmpeg-docnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavcodec-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavcodec-extranoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavcodec-extra60noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavcodec60noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavdevice-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavdevice60noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavfilter-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavfilter-extranoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavfilter-extra9noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavfilter9noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavformat-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavformat-extranoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavformat-extra60noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavformat60noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavutil-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavutil58noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibpostproc-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibpostproc57noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibswresample-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibswresample4noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibswscale-devnoble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibswscale7noble7:6.1.1-3ubuntu5+esm6fixed
Ubuntulibavpro6:0.8.7-1ubuntu2vulnerable
Ubuntulibavpro6:9.10-1ubuntu1vulnerable
Ubuntulibavpro6:9.10-1ubuntu2vulnerable
Ubuntulibavpro6:9.10-1ubuntu5vulnerable
Ubuntulibavpro6:9.10-1ubuntu6vulnerable
Ubuntulibavpro6:9.10-1ubuntu7vulnerable
Ubuntulibavpro6:9.11-2ubuntu1vulnerable
Ubuntulibavpro6:9.11-2ubuntu2vulnerable
Ubuntulibavpro6:9.13-0ubuntu0.14.04.1vulnerable
Ubuntulibavpro6:9.14-0ubuntu0.14.04.1vulnerable
Ubuntulibavpro6:9.16-0ubuntu0.14.04.1vulnerable
Ubuntulibavpro6:9.18-0ubuntu0.14.04.1vulnerable
Ubuntulibavpro6:9.20-0ubuntu0.14.04.1vulnerable
Ubuntulibavpro6:9.20-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuffmpegpro7:6.0-6ubuntu1vulnerable
Ubuntuffmpegpro7:6.0-9ubuntu1vulnerable
Ubuntuffmpegpro7:6.1-2ubuntu1vulnerable
Ubuntuffmpegpro7:6.1-3ubuntu1vulnerable
Ubuntuffmpegpro7:6.1-4ubuntu1vulnerable
Ubuntuffmpegpro7:6.1-5ubuntu1vulnerable
Ubuntuffmpegpro7:6.1.1-1ubuntu1vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu1vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm1vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm2vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm3vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm4vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm5vulnerable
Ubuntuffmpegpro7:6.1.1-3ubuntu5+esm6fixed
Ubuntuffmpeg22.047:4.4-6ubuntu5vulnerable
Ubuntuffmpeg22.047:4.4.1-2ubuntu1vulnerable
Ubuntuffmpeg22.047:4.4.1-3ubuntu1vulnerable
Ubuntuffmpeg22.047:4.4.1-3ubuntu2vulnerable
Ubuntuffmpeg22.047:4.4.1-3ubuntu3vulnerable
Ubuntuffmpeg22.047:4.4.1-3ubuntu5vulnerable
Ubuntuffmpeg22.047:4.4.2-0ubuntu0.22.04.1vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu1vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu2vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu3vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu4vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu4.1fixed
Ubuntuffmpeg25.107:7.1.1-1ubuntu1vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu2vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu3vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu4vulnerable
Ubuntuffmpeg25.107:7.1.1-1ubuntu4.1fixed
Suseffmpeg-7linux enterprise server 16.07.1.2-160000.1.1fixed
Suseffmpeg-7linux enterprise server for sap applications 16.07.1.2-160000.1.1fixed
Opensuseffmpeg-7leap 16.07.1.2-160000.1.1fixed
Opensuseffmpeg-4tumbleweed4.4.6-5.1fixed
Opensuseffmpeg-7tumbleweed7.1.1-8.1fixed
Suseffmpeglinux enterprise high performance computing 15 sp3-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise high performance computing 15 sp4-espos3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise high performance computing 15 sp4-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise high performance computing 15 sp5-espos3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise high performance computing 15 sp5-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server 15 sp3-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server 15 sp4-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server 15 sp5-ltss3.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server for sap applications 15 sp33.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server for sap applications 15 sp43.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise server for sap applications 15 sp53.4.2-150200.11.67.1fixed
Suseffmpegenterprise storage 7.13.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise module for desktop applications 15 sp63.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise module for desktop applications 15 sp73.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise module for package hub 15 sp63.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise module for package hub 15 sp73.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise workstation extension 15 sp63.4.2-150200.11.67.1fixed
Suseffmpeglinux enterprise workstation extension 15 sp73.4.2-150200.11.67.1fixed
Opensuseffmpegleap 15.63.4.2-150200.11.67.1fixed
Suseffmpeg-4linux enterprise module for package hub 15 sp64.4.6-150600.13.30.1fixed
Suseffmpeg-4linux enterprise module for package hub 15 sp74.4.6-150600.13.30.1fixed
Suseffmpeg-4linux enterprise workstation extension 15 sp64.4.6-150600.13.30.1fixed
Suseffmpeg-4linux enterprise workstation extension 15 sp74.4.6-150600.13.30.1fixed
Opensuseffmpeg-4leap 15.64.4.6-150600.13.30.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianffmpegsourcesid7:7.1.2-1not yet assignedNot reportedNot reported
Debianffmpegsourceforky7:7.1.2-1not yet assignedNot reportedNot reported
Debianffmpegsourcetrixie7:7.1.2-0+deb13u1not yet assignedNot reportedNot reported
Debianffmpegsourcebookworm7:5.1.7-0+deb12u1not yet assignedNot reportedNot reported
Ubuntuffmpegdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntuffmpeg-docdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavcodec-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavcodec-extradebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavcodec-extra60debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavcodec60debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavdevice-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavdevice60debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavfilter-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavfilter-extradebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavfilter-extra9debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavfilter9debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavformat-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavformat-extradebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavformat-extra60debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavformat60debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavutil-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibavutil58debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibpostproc-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibpostproc57debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibswresample-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibswresample4debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibswscale-devdebnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntulibswscale7debnoble7:6.1.1-3ubuntu5+esm6Not reportedNot reportedNot reported
Ubuntuffmpegdebpro7:6.1.1-3ubuntu5+esm6Not reportedUBUNTU-CVE-2025-7700Not reported
Ubuntuffmpegdeb25.107:7.1.1-1ubuntu4.1Not reportedUBUNTU-CVE-2025-7700Not reported
Ubuntuffmpegdeb25.107:7.1.1-1ubuntu4.1Not reportedUSN-7871-1Not reported
Suseffmpeg-7rpmlinux enterprise server 16.07.1.2-160000.1.1Not reportedSUSE-SU-2026:20932-1Not reported
Suseffmpeg-7rpmlinux enterprise server for sap applications 16.07.1.2-160000.1.1Not reportedSUSE-SU-2026:20932-1Not reported
Opensuseffmpeg-7rpmleap 16.07.1.2-160000.1.1Not reportedOPENSUSE-SU-2026:20420-1Not reported
Opensuseffmpeg-4rpmtumbleweed4.4.6-5.1Not reportedOPENSUSE-SU-2025:15427-1Not reported
Opensuseffmpeg-7rpmtumbleweed7.1.1-8.1Not reportedOPENSUSE-SU-2025:15396-1Not reported
Suseffmpegrpmlinux enterprise high performance computing 15 sp3-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise high performance computing 15 sp4-espos3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise high performance computing 15 sp4-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise high performance computing 15 sp5-espos3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise high performance computing 15 sp5-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server 15 sp3-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server 15 sp4-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server 15 sp5-ltss3.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server for sap applications 15 sp33.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server for sap applications 15 sp43.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise server for sap applications 15 sp53.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmenterprise storage 7.13.4.2-150200.11.67.1Not reportedSUSE-SU-2025:2990-1Not reported
Suseffmpegrpmlinux enterprise module for desktop applications 15 sp63.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpegrpmlinux enterprise module for desktop applications 15 sp73.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpegrpmlinux enterprise module for package hub 15 sp63.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpegrpmlinux enterprise module for package hub 15 sp73.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpegrpmlinux enterprise workstation extension 15 sp63.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpegrpmlinux enterprise workstation extension 15 sp73.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Opensuseffmpegrpmleap 15.63.4.2-150200.11.67.1Not reportedSUSE-SU-2025:02990-1Not reported
Suseffmpeg-4rpmlinux enterprise module for package hub 15 sp64.4.6-150600.13.30.1Not reportedSUSE-SU-2025:03162-1Not reported
Suseffmpeg-4rpmlinux enterprise module for package hub 15 sp74.4.6-150600.13.30.1Not reportedSUSE-SU-2025:03162-1Not reported
Suseffmpeg-4rpmlinux enterprise workstation extension 15 sp64.4.6-150600.13.30.1Not reportedSUSE-SU-2025:03162-1Not reported
Suseffmpeg-4rpmlinux enterprise workstation extension 15 sp74.4.6-150600.13.30.1Not reportedSUSE-SU-2025:03162-1Not reported
Opensuseffmpeg-4rpmleap 15.64.4.6-150600.13.30.1Not reportedSUSE-SU-2025:03162-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

  • Source package: [ffmpeg-4]

    Details (1)
    • 4.4.8-4.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.4.6-5.1

      Version impact unknown

      usn · ffmpeg-4 · opensuse · tumbleweed

  • [libavcodec61]Unknown

    Source package: [ffmpeg-7]

    Details (1)
    • 7.1.5-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 7.1.1-8.1

      Version impact unknown

      usn · ffmpeg-7 · opensuse · tumbleweed

Next results

Observed:

References