Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-25467

Опубликовано: 18 фев. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.

РелизСтатусПримечание
devel

deferred

2026-04-21
esm-apps-legacy/xenial

deferred

2026-04-21
esm-apps/bionic

deferred

2026-04-21
esm-apps/focal

deferred

2026-04-21
esm-apps/jammy

deferred

2026-04-21
esm-apps/noble

deferred

2026-04-21
esm-apps/resolute

deferred

2026-04-21
esm-apps/xenial

ignored

end of ESM support, was deferred [2026-04-21]
focal

ignored

end of standard support, was needs-triage
jammy

deferred

2026-04-21

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
devel

deferred

2026-04-21
esm-apps-legacy/xenial

deferred

2026-04-21
esm-apps/bionic

deferred

2026-04-21
esm-apps/focal

deferred

2026-04-21
esm-apps/jammy

deferred

2026-04-21
esm-apps/noble

deferred

2026-04-21
esm-apps/resolute

deferred

2026-04-21
esm-apps/xenial

ignored

end of ESM support, was deferred [2026-04-21]
esm-infra-legacy/trusty

deferred

2026-04-21
focal

ignored

end of standard support, was needs-triage

Показывать по

EPSS

Процентиль: 50%
0.00672
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.

CVSS3: 9.8
debian
больше 1 года назад

Insufficient tracking and releasing of allocated used memory in libx26 ...

CVSS3: 9.8
github
больше 1 года назад

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость библиотеки кодирования для создания видеопотоков libx264 мультимедийной библиотеки FFmpeg, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 50%
0.00672
Низкий

9.8 Critical

CVSS3