CVE 4.8 MEDIUM

libav DSS File Demuxer avconv.c main double free_CVE-2025-8585

4.8 / 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.

Basic Information

ID CVE-2025-8585
Source VulDB
Published Aug 5, 2025 at 17:02
Modified Aug 6, 2025 at 15:09

Affected Product

Vendor n/a
Product libav
Version 12.0
Affected Versions n/a libav 12.0
n/a libav 12.1
n/a libav 12.2
n/a libav 12.3

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.