Live › vulnerability › CVE-2025-52290
Go to dashboardA NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of FFmpeg N-119856 lets a crafted media file crash the process. An attacker gets a denial of service, not code execution, according to the source description.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Services that run FFmpeg (libavformat/libavcodec) on untrusted media, such as upload processing, transcoding or thumbnailing pipelines, can be crashed by one crafted file (MPEG-TS input with mismatched codec context). Impact is denial of service only; no code execution shown. Teams that only process their own trusted media can skip it. The full affected range is not established.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ffmpeg | vendor | N-119856-gbe46370941 (full range unknown) | – |
ffmpeg -version; a git build at or near N-119856-gbe46370941 is the tested one. Distro/release builds are not stated as affected or unaffected.ffmpeg -i 1_poc.mp4 -f null - with the public sample; a crash (SEGV in avpriv_h264_has_num_reorder_frames) means exposed.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file.
This page as .md · .json · in your agent: get_signal("CVE-2025-52290")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.