# CVE-2025-59731: ffmpeg: When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data...

CVE-2025-59731 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2025-59731, released October 6, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-59731
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0018
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 6, 2025

## Description

When decoding an OpenEXR file that uses DWAA or DWAB compression, the specified raw length of run-length-encoded data is not checked when using it to calculate the output data.  We read rle_raw_size from the input file at [0], we decompress and decode into the buffer td->rle_raw_data of size rle_raw_size at [1], and then at [2] we will access entries in this buffer up to (td->xsize - 1) * (td->ysize - 1) + rle_raw_size / 2, which may exceed rle_raw_size.     We recommend upgrading to version 8.0 or beyond.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ffmpeg Debian 12.15 (bookworm) | 7:5.1.7-0+deb12u1 | [DEBIAN-CVE-2025-59731](https://patchblox.com/security/data/fix/linux/debian-cve-2025-59731.md) | Oct 6, 2025 |
| Linux | ffmpeg Debian 13.5 (trixie) | 7:7.1.2-0+deb13u1 | [DEBIAN-CVE-2025-59731](https://patchblox.com/security/data/fix/linux/debian-cve-2025-59731.md) | Oct 6, 2025 |
| Linux | ffmpeg Debian 14 | 7:7.1.2-1 | [DEBIAN-CVE-2025-59731](https://patchblox.com/security/data/fix/linux/debian-cve-2025-59731.md) | Oct 6, 2025 |
| Linux | ffmpeg Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ffmpeg-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | ffmpeg Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [ffmpeg 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ffmpeg-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | ffmpeg Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [ffmpeg 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-ffmpeg-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavcodec-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavcodec-extra 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec-extra-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavcodec-extra Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavcodec-extra 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavcodec-extra-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavcodec-extra Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavcodec-extra 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavcodec-extra-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavcodec-extra58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec-extra58-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavcodec-extra60 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavcodec-extra60 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavcodec-extra60-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavcodec-extra61 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavcodec-extra61 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavcodec-extra61-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavcodec58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavcodec58-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavcodec60 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavcodec60 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavcodec60-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavcodec61 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavcodec61 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavcodec61-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavdevice58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavdevice58-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavdevice60 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavdevice60 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavdevice60-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavdevice61 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavdevice61 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavdevice61-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavfilter-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavfilter-extra 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter-extra-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavfilter-extra Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavfilter-extra 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavfilter-extra-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavfilter-extra Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavfilter-extra 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavfilter-extra-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavfilter-extra10 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavfilter-extra10 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavfilter-extra10-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavfilter-extra7 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter-extra7-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavfilter-extra9 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavfilter-extra9 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavfilter-extra9-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavfilter10 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavfilter10 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavfilter10-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavfilter7 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavfilter7-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavfilter9 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavfilter9 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavfilter9-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavformat-extra Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavformat-extra 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat-extra-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavformat-extra Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavformat-extra 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavformat-extra-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavformat-extra Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavformat-extra 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavformat-extra-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavformat-extra58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat-extra58-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavformat-extra60 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavformat-extra60 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavformat-extra60-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavformat-extra61 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavformat-extra61 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavformat-extra61-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavformat58 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavformat58-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavformat60 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavformat60 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavformat60-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavformat61 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavformat61 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavformat61-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libavutil56 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libavutil56-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libavutil58 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libavutil58 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libavutil58-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libavutil59 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libavutil59 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libavutil59-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libpostproc55 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpostproc55-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libpostproc57 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libpostproc57 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpostproc57-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libpostproc58 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libpostproc58 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libpostproc58-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libswresample3 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libswresample3-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libswresample4 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libswresample4 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libswresample4-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libswresample5 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libswresample5 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libswresample5-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |
| Linux | libswscale5 Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm11 | [libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm11](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libswscale5-7-4.4.2-0ubuntu0.22.04.1-esm11.md) | Dec 18, 2025 |
| Linux | libswscale7 Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm7 | [libswscale7 7:6.1.1-3ubuntu5+esm7](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libswscale7-7-6.1.1-3ubuntu5-esm7.md) | Dec 18, 2025 |
| Linux | libswscale8 Ubuntu 25.10 (questing) | 7:7.1.1-1ubuntu4.2 | [libswscale8 7:7.1.1-1ubuntu4.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libswscale8-7-7.1.1-1ubuntu4.2.md) | Dec 18, 2025 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.