Linux · SUSE Linux Enterprise · Security advisory · May 5, 2025
SUSE-SU-2025:1450-1: ffmpeg security update
SUSE-SU-2025:1450-1, released May 5, 2025, fixes 8 CVEs in ffmpeg (version 3.4.2-150200.11.60.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
8
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 8 CVEs
Patch now 0
Urgent 1
High 2
Routine 5
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ffmpeg | opensuse-leap 15.6 | 3.4.2-150200.11.60.1 |
| ffmpeg | sles 15.6 | 3.4.2-150200.11.60.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2024-35368 | ffmpeg-4: Security update for ffmpeg-4 | 9.8 | 0.0071 | None reported |
| High | CVE-2024-35365 | ffmpeg: Fix double-free on error | 8.8 | 0.0067 | None reported |
| High | CVE-2023-51793 | ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via t... | 7.8 | 0.0032 | None reported |
| Routine | CVE-2025-22919 | ffmpeg: Check for valid sample rate, to fix the invalid sample rate >= 0 | 6.5 | 0.0042 | None reported |
| Routine | CVE-2025-0518 | ffmpeg: Fix memory data leak when use sscanf() | 5.3 | 0.0038 | None reported |
| Routine | CVE-2025-22921 | ffmpeg: FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain asegmentation violation via the component /libavcode... | 6.5 | 0.0037 | None reported |
| Routine | CVE-2024-36613 | ffmpeg: Adjust order of operations around block align | 6.2 | 0.0028 | None reported |
| Routine | CVE-2024-12361 | ffmpeg: Add check for av_packet_new_side_data() to avoid null pointer dereference if allocation fails | n/a | n/a | None reported |
Showing 1 to 8 of 8
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.