{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ffmpeg-n-119856-gbe46370941/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:N-119856-gbe46370941:*:*:*:*:*:*:*"],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (N-119856-gbe46370941)"],"_cs_severities":["medium"],"_cs_tags":["denial-of-service","vulnerability","ffmpeg"],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eA NULL pointer dereference vulnerability, tracked as CVE-2025-52290, has been identified in the avpriv_h264_has_num_reorder_frames function of FFmpeg version N-119856-gbe46370941. This vulnerability occurs when the library processes a maliciously crafted media file containing invalid H.264 stream parameters. When the vulnerable function attempts to access the pointer, the dereference error causes an immediate application crash, leading to a Denial of Service. This impacts any application, service, or media processing pipeline that utilizes the affected FFmpeg build. Defenders should assess their software bill of materials (SBOM) to identify systems utilizing this specific version of FFmpeg and prioritize updating to a patched release.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to a crash of the service utilizing the library, resulting in a denial of service. The impact is significant for media streaming platforms, video transcoding services, and client-side applications that rely on FFmpeg for parsing untrusted video input, potentially leading to widespread service disruption.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all production systems and applications that incorporate FFmpeg to identify instances of version N-119856-gbe46370941.\u003c/li\u003e\n\u003cli\u003eUpgrade the FFmpeg library to the latest stable release to remediate CVE-2025-52290.\u003c/li\u003e\n\u003cli\u003eImplement input validation and sandboxing for media processing pipelines to isolate parsing errors if immediate patching is not possible.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-20T00:31:06Z","date_published":"2026-10-20T00:31:06Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ffmpeg-null-ptr/","summary":"A NULL pointer dereference vulnerability in FFmpeg version N-119856-gbe46370941 allows remote attackers to trigger a Denial of Service through specially crafted media files.","title":"Denial of Service Vulnerability in FFmpeg avpriv_h264_has_num_reorder_frames","url":"https://feed.craftedsignal.io/briefs/2026-10-ffmpeg-null-ptr/"}],"language":"en","title":"CraftedSignal Threat Feed - FFmpeg (N-119856-Gbe46370941)","version":"https://jsonfeed.org/version/1.1"}