Medium severity5.3NVD Advisory· Published Feb 18, 2025· Updated Apr 15, 2026

CVE-2025-22920

Description

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service (DoS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpegllm-fuzzy
Range: < commit 4bf784c
osv-coords
pkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Tumbleweed
Range: < 7.1-3.1

Patches

Vulnerability mechanics

References

git.ffmpeg.org/gitweb/ffmpeg.git/commit/4bf784c0e5615c3f934e677d5de093a8be7da7aenvd
trac.ffmpeg.org/ticket/11389nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000