CVE-2025-7700
Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
07 Nov 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
ffmpegWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →