Vulnerability · Published Feb 23, 2025 · Assigned by VulDB
CVE-2025-1594FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow
Medium 6.3
In plain English
A medium-severity stack buffer overflow in FFmpeg. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.23 | ffmpeg | 7.1.1-r0, 8.0-r0 | ALPINE-CVE-2025-1594 |
| Alpine:v3.24 | ffmpeg | 7.1.1-r0, 8.0-r0 | ALPINE-CVE-2025-1594 |
| Debian:12 | ffmpeg | 7:5.1.8-0+deb12u1 | DSA-6079-1 |
| Debian:12 | ffmpeg | 7:5.1.8-0+deb12u1 | DEBIAN-CVE-2025-1594 |
| Debian:13 | ffmpeg | 7:7.1.2-0+deb13u1 | DEBIAN-CVE-2025-1594 |
| Debian:13 | ffmpeg | 7:7.1.2-0+deb13u1 | DSA-6007-1 |
| Debian:14 | ffmpeg | 7:7.1.2-1 | DEBIAN-CVE-2025-1594 |
| Ubuntu:25.10 | ffmpeg | 7:7.1.1-1ubuntu4 | UBUNTU-CVE-2025-1594 |
Affected products (as reported)
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
References
- VDB-296589 | FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow vdb-entry, technical-description
- VDB-296589 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #496929 | FFmpeg git master stack-buffer-overflow third-party-advisory
- https://trac.ffmpeg.org/ticket/11418#comment:3 issue-tracking
- https://trac.ffmpeg.org/attachment/ticket/11418/poc exploit, issue-tracking
- https://ffmpeg.org/ product