Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 9: ffmpeg Critical Heap Overflow DoS Issues MGASA-2025-0306

mageia
Calendar Grey November 21, 2025
Dist Mageia Esm H88
Mageia updates ffmpeg to address multiple security vulnerabilities including DoS and overflow risks affecting version 6.1-3.
MGASA-2025-0306 - Updated ffmpeg packages fix security vulnerabilities

Summary

Description: FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/samplefmt.c:260:9 component. (CVE-2023-50007) FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component. (CVE-2023-50008) Improper handling of input format in tty demuxer of ffmpeg. (CVE-2023-6602) Hls xbin demuxer dos amplification in ffmpeg. (CVE-2023-6604) Dash playlist ssrf vulnerability in ffmpeg. (CVE-2023-6605) FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input. (CVE-2024-31582) FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer. (CVE-2024-35367) Heap...

References

- https://bugs.mageia.org/show_bug.cgi?id=34757

- https://ffmpeg.org/security.html

- https://lists.debian.org/debian-security-announce/2025/msg00149.html

- https://www.cve.org/CVERecord?id=CVE-2023-50007

- https://www.cve.org/CVERecord?id=CVE-2023-50008

- https://www.cve.org/CVERecord?id=CVE-2023-6602

- https://www.cve.org/CVERecord?id=CVE-2023-6604

- https://www.cve.org/CVERecord?id=CVE-2023-6605

- https://www.cve.org/CVERecord?id=CVE-2024-31582

- https://www.cve.org/CVERecord?id=CVE-2024-35367

- https://www.cve.org/CVERecord?id=CVE-2025-59728

- https://www.cve.org/CVERecord?id=CVE-2025-59731

- https://www.cve.org/CVERecord?id=CVE-2025-59732

- https://www.cve.org/CVERecord?id=CVE-2025-59733

- https://www.cve.org/CVERecord?id=CVE-2025-7700

Topics%20covered

Topics Covered

security advisory denial of service security patch heap overflow ffmpeg Mageia

Resolution

SRPMS

- 9/core/ffmpeg-5.1.7-1.mga9

- 9/tainted/ffmpeg-5.1.7-1.mga9.tainted

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 21 Nov 2025
URL: https://advisories.mageia.org/MGASA-2025-0306.html
Type: security
CVE: CVE-2023-50007, CVE-2023-50008, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2024-31582, CVE-2024-35367, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-7700

Topics%20covered

Topics Covered

security advisory denial of service security patch heap overflow ffmpeg Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here