CVE-2025-0518: Ffmpeg

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman

Affected products

• Ffmpeg Ffmpeg: version 7.1 only

Published 2025-01-16. Last modified 2026-06-17.