NULL pointer dereference in FFmpeg - CVE-2025-7700

Vulnerability identifier: #VU115966

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-7700

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the decode_init() function in the ALS audio decoder. A remote attacker can pass specially crafted image to the application and perform a denial of service (DoS) attack.

FFmpeg
Debian Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
Desktop Applications Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
libswresample2-32bit-debuginfo
ffmpeg-debuginfo
libavresample3-debuginfo
libavresample-devel
libavresample3
libavutil55-32bit-debuginfo
libavcodec57-32bit
libswscale4-32bit-debuginfo
libavcodec57-32bit-debuginfo
libavutil55
libavresample3-32bit-debuginfo
libavformat57-32bit-debuginfo
libavfilter6-32bit
libswscale4-32bit
libavresample3-32bit
libpostproc54-32bit-debuginfo
libavformat57-32bit
libswresample2-32bit
ffmpeg-debugsource
libswresample2-debuginfo
libavutil-devel
libavformat57-debuginfo
libswresample2
libavformat57
libavcodec57-debuginfo
libswresample-devel
libavcodec57
libpostproc-devel
libpostproc54
libswscale-devel
libavutil55-debuginfo
libpostproc54-debuginfo
libswscale4
libswscale4-debuginfo
libavdevice-devel
libavutil55-32bit
libavcodec-devel
libavformat-devel
libavfilter6
libavdevice57-debuginfo
libavdevice57-32bit-debuginfo
libavfilter6-32bit-debuginfo
libpostproc54-32bit
libavdevice57-32bit
libavfilter6-debuginfo
libavfilter-devel
ffmpeg
ffmpeg-private-devel
libavdevice57
ffmpeg (Ubuntu package)
libswresample3_9-32bit
libavcodec58_134-32bit-debuginfo
libavfilter7_110-32bit
libavdevice58_13-64bit-debuginfo
libswresample3_9-64bit-debuginfo
libavformat58_76-64bit-debuginfo
libswresample3_9-64bit
libavcodec58_134-64bit
libavresample4_0-64bit-debuginfo
libavfilter7_110-64bit-debuginfo
libavformat58_76-64bit
libavfilter7_110-64bit
libavdevice58_13-64bit
libpostproc55_9-64bit
libswscale5_9-64bit-debuginfo
libavutil56_70-64bit-debuginfo
libavutil56_70-64bit
libavcodec58_134-64bit-debuginfo
libswscale5_9-64bit
libavresample4_0-64bit
libpostproc55_9-64bit-debuginfo
libavdevice58_13-debuginfo
libavresample4_0
libpostproc55_9
libavfilter7_110-debuginfo
libavformat58_76
libavutil56_70
libavcodec58_134
libavutil56_70-debuginfo
libswresample3_9
libavformat58_76-debuginfo
libavdevice58_13
ffmpeg-4
ffmpeg-4-libavformat-devel
libswresample3_9-32bit-debuginfo
ffmpeg-4-libavdevice-devel
libpostproc55_9-debuginfo
libswscale5_9
ffmpeg-4-debugsource
ffmpeg-4-libavcodec-devel
ffmpeg-4-libpostproc-devel
ffmpeg-4-debuginfo
ffmpeg-4-libswscale-devel
libswresample3_9-debuginfo
libavfilter7_110
libavdevice58_13-32bit-debuginfo
libpostproc55_9-32bit-debuginfo
libavutil56_70-32bit-debuginfo
libswscale5_9-32bit-debuginfo
libavresample4_0-32bit-debuginfo
libavformat58_76-32bit
libavcodec58_134-32bit
libswscale5_9-32bit
libpostproc55_9-32bit
libavformat58_76-32bit-debuginfo
libavutil56_70-32bit
libavfilter7_110-32bit-debuginfo
libavresample4_0-32bit
ffmpeg-4-private-devel
libswscale5_9-debuginfo
libavcodec58_134-debuginfo
ffmpeg-4-libavresample-devel
ffmpeg-4-libswresample-devel
ffmpeg-4-libavfilter-devel
ffmpeg-4-libavutil-devel
libavdevice58_13-32bit
libavresample4_0-debuginfo
ffmpeg (Debian package)
ffmpeg-libs
libavdevice
ffmpeg-devel

Install updates from vendor's website.

libswresample2-32bit-debuginfo - update to 3.4.2-150200.11.67.1
ffmpeg-debuginfo - update to 3.4.2-150200.11.67.1
libavresample3-debuginfo - update to 3.4.2-150200.11.67.1
libavresample-devel - update to 3.4.2-150200.11.67.1
libavresample3 - update to 3.4.2-150200.11.67.1
libavutil55-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavcodec57-32bit - update to 3.4.2-150200.11.67.1
libswscale4-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavcodec57-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavutil55 - update to 3.4.2-150200.11.67.1
libavresample3-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavformat57-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavfilter6-32bit - update to 3.4.2-150200.11.67.1
libswscale4-32bit - update to 3.4.2-150200.11.67.1
libavresample3-32bit - update to 3.4.2-150200.11.67.1
libpostproc54-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavformat57-32bit - update to 3.4.2-150200.11.67.1
libswresample2-32bit - update to 3.4.2-150200.11.67.1
ffmpeg-debugsource - update to 3.4.2-150200.11.67.1
libswresample2-debuginfo - update to 3.4.2-150200.11.67.1
libavutil-devel - update to 3.4.2-150200.11.67.1
libavformat57-debuginfo - update to 3.4.2-150200.11.67.1
libswresample2 - update to 3.4.2-150200.11.67.1
libavformat57 - update to 3.4.2-150200.11.67.1
libavcodec57-debuginfo - update to 3.4.2-150200.11.67.1
libswresample-devel - update to 3.4.2-150200.11.67.1
libavcodec57 - update to 3.4.2-150200.11.67.1
libpostproc-devel - update to 3.4.2-150200.11.67.1
libpostproc54 - update to 3.4.2-150200.11.67.1
libswscale-devel - update to 3.4.2-150200.11.67.1
libavutil55-debuginfo - update to 3.4.2-150200.11.67.1
libpostproc54-debuginfo - update to 3.4.2-150200.11.67.1
libswscale4 - update to 3.4.2-150200.11.67.1
libswscale4-debuginfo - update to 3.4.2-150200.11.67.1
libavdevice-devel - update to 3.4.2-150200.11.67.1
libavutil55-32bit - update to 3.4.2-150200.11.67.1
libavcodec-devel - update to 3.4.2-150200.11.67.1
libavformat-devel - update to 3.4.2-150200.11.67.1
libavfilter6 - update to 3.4.2-150200.11.67.1
libavdevice57-debuginfo - update to 3.4.2-150200.11.67.1
libavdevice57-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libavfilter6-32bit-debuginfo - update to 3.4.2-150200.11.67.1
libpostproc54-32bit - update to 3.4.2-150200.11.67.1
libavdevice57-32bit - update to 3.4.2-150200.11.67.1
libavfilter6-debuginfo - update to 3.4.2-150200.11.67.1
libavfilter-devel - update to 3.4.2-150200.11.67.1
ffmpeg - update to 3.4.2-150200.11.67.1
ffmpeg-private-devel - update to 3.4.2-150200.11.67.1
libavdevice57 - update to 3.4.2-150200.11.67.1
ffmpeg (Ubuntu package) - addressed in versions 7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6, 7:7.1.1-1ubuntu1.3, 7:7.1.1-1ubuntu4.1
libswresample3_9-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswresample3_9-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswresample3_9-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0-64bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9-64bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswresample3_9 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavformat-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswresample3_9-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavdevice-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-debugsource - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavcodec-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libpostproc-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libswscale-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswresample3_9-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110 - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libpostproc55_9-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavformat58_76-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavutil56_70-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavfilter7_110-32bit-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-private-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libswscale5_9-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavcodec58_134-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavresample-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libswresample-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavfilter-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg-4-libavutil-devel - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavdevice58_13-32bit - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
libavresample4_0-debuginfo - addressed in versions 4.4.6-150600.13.30.1, 4.4.6-150600.13.33.1
ffmpeg (Debian package) - addressed in versions 7:5.1.7-0+deb12u1, 7:7.1.2-0+deb13u1
ffmpeg-libs - update to 6.1.1-24
libavdevice - update to 6.1.1-24
ffmpeg-devel - update to 6.1.1-24
ffmpeg-debugsource - update to 6.1.1-24
ffmpeg-debuginfo - update to 6.1.1-24
ffmpeg - update to 6.1.1-24

• https://bugzilla.redhat.com/show_bug.cgi?id=2380420

• Denial of service in FFmpeg
• SUSE update for ffmpeg
• SUSE update for ffmpeg-4
• Debian update for ffmpeg
• Debian update for ffmpeg
• Ubuntu update for ffmpeg
• SUSE update for ffmpeg
• Ubuntu update for ffmpeg
• SUSE update for ffmpeg-4
• openEuler 24.03 LTS update for ffmpeg
• openEuler 24.03 LTS SP2 update for ffmpeg
• openEuler 24.03 LTS SP1 update for ffmpeg