CVE-2025-25467

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.

Published 2025-02-18. Last modified 2026-06-17.