Bug 2406533 (CVE-2025-12343)

Summary: CVE-2025-12343 FFmpeg: Double-Free Vulnerability in FFmpeg TensorFlow DNN Backend
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: gtanzill, jbuscemi
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2406535, 2406536, 2406537, 2406538, 2406539, 2406540, 2406541, 2406542, 2406543    
Bug Blocks:    

Description OSIDB Bzimport 2025-10-27 12:54:46 UTC 
Double-Free vulnerability in the TensorFlow DNN backend of the FFmpeg multimedia framework. The flaw resides in the dnn_execute_model_tf() function, where a task object is improperly freed multiple times using av_freep() under certain error conditions. Because the same task is also released later by dnn_free_model_tf() after a successful queue push, this leads to a double-free and subsequent memory corruption. An attacker could exploit this issue by feeding crafted data to a process using FFmpeg’s DNN TensorFlow backend, triggering a crash and causing a denial of service.