CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-22920: A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media...
Description
A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service (DoS).
Classification
CVE ID: CVE-2025-22920
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 10.92% (scored less or equal to compared to others)
EPSS Date: 2025-03-19 (when was this score calculated)
References
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/4bf784c0e5615c3f934e677d5de093a8be7da7aehttps://trac.ffmpeg.org/ticket/11389