CVE-2025-8584 | libav up to 12.3 AVI File Parser libavutil/buffer.c av_buffer_unref null pointer dereference (ID 11679)

August 5, 2025 Yanac

A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is known as CVE-2025-8584. Local access is required to approach this attack. Furthermore, there is an exploit available.

The bug was initially reported by the researcher to the wrong project.VulDB Recent EntriesRead More