Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-8585

A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.

Published

2025-08-05T17:15:30.300

Last Modified

2025-09-04T15:36:05.647

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.1

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-119
    CWE-415
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application libav libav ≤ 12.3 Yes
References