Bug 2380420 (CVE-2025-7700) - CVE-2025-7700 FFmpeg: NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c)
Summary: CVE-2025-7700 FFmpeg: NULL Pointer Dereference in FFmpeg ALS Decoder (libavco...
Keywords:
Status: NEW
Alias: CVE-2025-7700
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2381578 2381579 2381580 2381581 2381582 2381583 2381584 2381585 2381586
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-16 05:13 UTC by OSIDB Bzimport
Modified: 2025-07-17 15:45 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-07-16 05:13:53 UTC
NULL Pointer Dereference vulnerability in the ALS audio decoder of the FFmpeg multimedia framework. The flaw lies in the decode_init() function, where memory allocation results (e.g., larray, nbits, raw_mantissa[c]) are not validated before use. If a crafted ALS file causes allocation functions like av_malloc_array() or av_calloc() to fail, the code may dereference NULL pointers, leading to application crashes. This issue can be triggered remotely without any authentication, resulting in a denial-of-service scenario for any application using FFmpeg for ALS decoding.


Note You need to log in before you can comment on or make changes to this bug.