CVE-2025-1816

Summary

CVE-2025-1816 is a newly disclosed vulnerability affecting FFmpeg versions up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This issue lies in the function audio_element_obu of the IAMF File Handler's libavformat/iamf_parse.c component. The manipulation of the argument 'num_parameters' results in a memory leak, which can be exploited remotely. The exploit is publicly known, making this a significant security concern. The patch for this issue is identified by the commit ID 0526535cd58444dd264e810b2f3348b4d96cff3b, and applying it is strongly recommended to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.