All vulnerabilities

Servers and applications

CVE-2025-1373

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The patch is identified as…

Severity
Medium 4.8
Published
17 Feb 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
FFmpegServers and applications · cpe:a:ffmpeg:ffmpeg
  • Every version up to 7.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-1373
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-1373