Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-10256
PUBLISHED
More InfoOfficial Page
Assigner-fedora
Assigner Org ID-92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5
View Known Exploited Vulnerability (KEV) details
Published At-18 Feb, 2026 | 20:26
Updated At-18 Feb, 2026 | 20:26
Rejected At-
▼CVE Numbering Authority (CNA)
Ffmpeg: null pointer dereference in firequalizer filter (libavfilter/af_firequalizer.c)

A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.

Affected Products
Collection URL
https://github.com/FFmpeg/FFmpeg/
Package Name
ffmpeg
Default Status
unaffected
Versions
Affected
  • From 3.2 before 8.0 (semver)
Problem Types
TypeCWE IDDescription
CWECWE-476NULL Pointer Dereference
Type: CWE
CWE ID: CWE-476
Description: NULL Pointer Dereference
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Metrics Other Info
Red Hat severity rating
value:
Moderate
namespace:
https://access.redhat.com/security/updates/classification/
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds

No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability.

Exploits
Credits
Red Hat would like to thank Jiasheng Jiang for reporting this issue.
Timeline
EventDate
Reported to Red Hat.2025-09-11 00:00:00
Made public.2024-08-07 00:00:00
Event: Reported to Red Hat.
Date: 2025-09-11 00:00:00
Event: Made public.
Date: 2024-08-07 00:00:00
Replaced By
Rejected Reason
References
HyperlinkResource
https://access.redhat.com/security/cve/CVE-2025-10256
vdb-entry
x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2394495
issue-tracking
x_refsource_REDHAT
https://github.com/FFmpeg/FFmpeg/commit/a25462482c02c004d685a8fcf2fa63955aaa0931
N/A
https://github.com/FFmpeg/FFmpeg/commit/d3be186ed1bcdcf2c093d6b13a0e66dc5132be2a
N/A
Hyperlink: https://access.redhat.com/security/cve/CVE-2025-10256
Resource:
vdb-entry
x_refsource_REDHAT
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=2394495
Resource:
issue-tracking
x_refsource_REDHAT
Hyperlink: https://github.com/FFmpeg/FFmpeg/commit/a25462482c02c004d685a8fcf2fa63955aaa0931
Resource: N/A
Hyperlink: https://github.com/FFmpeg/FFmpeg/commit/d3be186ed1bcdcf2c093d6b13a0e66dc5132be2a
Resource: N/A
Details not found