TI-2025-37186 CVE-2025-59734 · GHSA-g9mr-r3g9-6594
Heap-buffer-overflow write in FFmpeg SANM process_ftch
Priority LOW 39
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2.
Vulnerabilities
6 records
TI-2025-37185 CVE-2025-59733 · GHSA-hpfq-c235-5854
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
Priority LOW 39
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type (and size), and that if there are four channels, the first four are "B", "…
TI-2025-37184 CVE-2025-59732 · GHSA-qr3p-83wm-px3f
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
Priority LOW 39
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8.
TI-2025-37183 CVE-2025-59731 · GHSA-p7r5-qh99-qchm
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
Priority LOW 32
When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data.
TI-2025-37182 CVE-2025-59730 · GHSA-3x55-g2vp-hv3w
Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48
Priority LOW 25
When decoding a frame for a SANM file (ANIM v0 variant), the decoded data can be larger than the buffer allocated for it.
TI-2025-37181 CVE-2025-59729 · GHSA-j8h4-v947-5h7q
Heap-buffer-overflow read in FFmpeg DHAV get_duration
Priority LOW 25
When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer.