Bug 2555742 (CVE-2025-52290) - CVE-2025-52290 ffmpeg: ffmpeg: Denial of Service via crafted media file
Summary: CVE-2025-52290 ffmpeg: ffmpeg: Denial of Service via crafted media file
Keywords:
Status: NEW
Alias: CVE-2025-52290
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2558065 2558066 2558067 2558068 2558072 2558073
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-19 17:53 UTC by OSIDB Bzimport
Modified: 2026-10-21 04:55 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-19 17:53:29 UTC 
A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file.
Note You need to log in before you can comment on or make changes to this bug.