Critical FFmpeg Denial of Service Vulnerability in Ubuntu Releases

Critical FFmpeg Denial of Service Vulnerability in Ubuntu Releases

First seen 2 Dec 2025, 18:33 UTC UbuntuLinuxsecurity 34.1

Article Content

Browse articles
ThreatCluster

A critical vulnerability has been identified in FFmpeg affecting Ubuntu 25.10 and 25.04, which could allow a remote attacker to crash the application by tricking users into opening specially crafted media files. The issue arises from improper memory allocation handling in the ALS audio decoder. Ubuntu 16.04 LTS is also affected by a separate denial of service vulnerability related to malformed HLS playlists.