CVE-2025-0518 Unchecked sscanf return value which leads to memory data leak
An attacker can read sensitive constants from the executable due to an unchecked sscanf return value in FFmpeg's audio filter.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-0518?
CVE-2025-0518 is a medium-severity vulnerability in Ffmpeg Ffmpeg, published on 16 Jan 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .
This issue affects FFmpeg: 7.1.
Issue was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a
https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman
Which versions are affected by CVE-2025-0518?
It affects 1 product.
Products include Ffmpeg Ffmpeg.
How do I fix CVE-2025-0518?
Apply the vendor's patch.
Is CVE-2025-0518 being exploited?
There is no known exploitation of CVE-2025-0518 in the wild and no public exploit code.
Other vulnerabilities in Ffmpeg Ffmpeg
Sources
Also known as DEBIAN-CVE-2025-0518, GHSA-vp3p-57c4-r559, JLSEC-2025-149, UBUNTU-CVE-2025-0518.