CVE-2025-59730
Fixed in a distro release EPSS <1%CVSS 5.7
When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution (width x height). A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame contents using a run-length encoding algorithm. There are no checks that the decoded frame fits in the allocated buffer, leading to a heap-buffer-overflow. process_frame_obj initializes the buffers based on the frame resolution: We recommend upgrading to version 8.0 or beyond.
Products: FFMPEG
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | eco-python-ffmpeg-6-minimal | no fix |
| Chainguard | eco-python-ffmpeg-6-minimal-dev | no fix |
| Chainguard | eco-python-ffmpeg-6-minimal-static | no fix |
| Chainguard | eco-python-ffmpeg-7-minimal | no fix |
| Chainguard | eco-python-ffmpeg-7-minimal-dev | no fix |
| Chainguard | eco-python-ffmpeg-7-minimal-static | no fix |
| Chainguard | ffmpeg-6 | no fix |
| Chainguard | ffmpeg-6-dev | 6.1.4-r0 |
| Chainguard | ffmpeg-6-doc | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libavcodec61 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libavdevice61 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libavfilter10 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libavformat61 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libavutil59 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libpostproc58 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libswresample5 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-libswscale8 | 6.1.4-r0 |
| Chainguard | ffmpeg-6-qt-faststart | 6.1.4-r0 |
| Chainguard | ffmpeg-6-static | 6.1.4-r0 |
| Chainguard | ffmpeg-7 | no fix |
| Chainguard | ffmpeg-7-dev | 7.1.3-r0 |
| Chainguard | ffmpeg-7-doc | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libavcodec61 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libavdevice61 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libavfilter10 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libavformat61 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libavutil59 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libpostproc58 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libswresample5 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-libswscale8 | 7.1.3-r0 |
| Chainguard | ffmpeg-7-qt-faststart | 7.1.3-r0 |
| Chainguard | ffmpeg-7-static | 7.1.3-r0 |
| Chainguard | ffmpeg-7.1 | no fix |
| Chainguard | ffmpeg-7.1-dev | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-doc | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavcodec61 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavdevice61 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavfilter10 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavformat61 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libavutil59 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libpostproc58 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libswresample5 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-libswscale8 | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-qt-faststart | 7.1.3-r1 |
| Chainguard | ffmpeg-7.1-static | 7.1.3-r1 |
| Chainguard | ffmpeg-fips-7.1 | 0 |
| Chainguard | ffmpeg-fips-7.1-dev | 0 |
| Chainguard | ffmpeg-fips-7.1-libavcodec61 | 0 |
| Chainguard | ffmpeg-fips-7.1-libavdevice61 | 0 |
| Chainguard | ffmpeg-fips-7.1-libavfilter10 | 0 |
| Chainguard | ffmpeg-fips-7.1-libavformat61 | 0 |
| Chainguard | ffmpeg-fips-7.1-libavutil59 | 0 |
| Chainguard | ffmpeg-fips-7.1-libpostproc58 | 0 |
| Chainguard | ffmpeg-fips-7.1-libswresample5 | 0 |
| Chainguard | ffmpeg-fips-7.1-libswscale8 | 0 |
| Chainguard | ffmpeg-fips-7.1-static | 0 |
| Chainguard | torchaudio-ffmpeg-tarballs | no fix |
| Chainguard | torchaudio-ffmpeg-tarballs-4.4.4 | no fix |
| Chainguard | torchaudio-ffmpeg-tarballs-5.0.3 | no fix |
| Chainguard | torchaudio-ffmpeg-tarballs-6.0 | no fix |
| Debian 11 | ffmpeg | no fix |
| Debian 12 | ffmpeg | no fix |
| Debian 13 | ffmpeg | no fix |
| Debian 14 | ffmpeg | no fix |
| Ubuntu Pro 14.04 LTS | libav | no fix |
| Wolfi | ffmpeg-7 | no fix |
| Wolfi | ffmpeg-7-dev | 7.1.3-r0 |
| Wolfi | ffmpeg-7-doc | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libavcodec61 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libavdevice61 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libavfilter10 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libavformat61 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libavutil59 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libpostproc58 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libswresample5 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-libswscale8 | 7.1.3-r0 |
| Wolfi | ffmpeg-7-qt-faststart | 7.1.3-r0 |
| Wolfi | ffmpeg-7-static | 7.1.3-r0 |
| Wolfi | ffmpeg-7.1 | no fix |
| Wolfi | ffmpeg-7.1-dev | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-doc | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavcodec61 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavdevice61 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavfilter10 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavformat61 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libavutil59 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libpostproc58 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libswresample5 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-libswscale8 | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-qt-faststart | 7.1.3-r1 |
| Wolfi | ffmpeg-7.1-static | 7.1.3-r1 |