← All advisories

High severity7.5OSV Advisory· Published Dec 18, 2025· Updated Jun 17, 2026

CVE-2025-63757

CVE-2025-63757

Description

Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13

FFmpeg/FfmpegOSV3 versions
N, n0.11-dev, n0.12-dev, …+ 2 more
- (no CPE)range: N, n0.11-dev, n0.12-dev, …
- (no CPE)range: =8.0
- cpe:2.3:a:ffmpeg:ffmpeg:8:*:*:*:*:*:*:*
FFmpeg/libswscalellm-create
Range: =8.0
osv-coords9 versions
pkg:rpm/opensuse/ffmpeg-4&distro=openSUSE%20Leap%2016.0 pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7 pkg:rpm/opensuse/ffmpeg-4&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/opensuse/ffmpeg-4&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ffmpeg-4&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP7
< 4.4.5-bp160.2.1+ 8 more
- (no CPE)range: < 4.4.5-bp160.2.1
- (no CPE)range: < 4.4.6-150600.13.38.1
- (no CPE)range: < 4.4.6-150600.13.38.1
- (no CPE)range: < 4.4.6-150400.3.60.1
- (no CPE)range: < 4.4.6-150400.3.60.1
- (no CPE)range: < 4.4.6-150400.3.60.1
- (no CPE)range: < 4.4.6-150400.3.60.1
- (no CPE)range: < 4.4.6-11.1
- (no CPE)range: < 4.4.6-150600.13.38.1

Patches

Vulnerability mechanics

References

3

gist.github.com/miora-sora/43c1c5616dd5b4f960a9d20296ef4833nvdPatch
code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20698nvdIssue Tracking
ffmpeg.org/security.htmlnvdProduct

News mentions

0

No linked articles in our index yet.