CVE-2025-12343lowCWE-415

CVE-2025-12343: falha de baixa gravidade em ffmpeg

Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FFmpeg+ Monitorar ffmpeg

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.2%
A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
ffmpeg
CVEs relacionadas — ffmpeg

No mesmo produto, das mais perigosas para as menos.

CVE-2025-7700MEDIUMFfmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)EPSS 0.4%CVE-2025-10256MEDIUMFfmpeg: null pointer dereference in firequalizer filter (libavfilter/af_firequalizer.c)EPSS 0.3%