{"id":"CVE-2025-1594","summary":"FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow","details":"A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","modified":"2026-08-17T04:22:43.400699998Z","published":"2025-02-23T21:00:13.152Z","related":["SUSE-SU-2026:2444-1","SUSE-SU-2026:2445-1","openSUSE-SU-2026:10866-1","openSUSE-SU-2026:10867-1","openSUSE-SU-2026:10890-1","openSUSE-SU-2026:11515-1","openSUSE-SU-2026:20855-1","openSUSE-SU-2026:21211-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1594.json","unresolved_ranges":[{"extracted_events":[{"introduced":"3.4.0"},{"last_affected":"3.4.0"},{"introduced":"3.4.1"},{"last_affected":"3.4.1"},{"introduced":"3.4.2"},{"last_affected":"3.4.2"},{"introduced":"3.4.3"},{"last_affected":"3.4.3"},{"introduced":"3.4.4"},{"last_affected":"3.4.4"},{"introduced":"3.4.5"},{"last_affected":"3.4.5"},{"introduced":"3.4.6"},{"last_affected":"3.4.6"},{"introduced":"3.4.7"},{"last_affected":"3.4.7"},{"introduced":"3.4.8"},{"last_affected":"3.4.8"},{"introduced":"3.4.9"},{"last_affected":"3.4.9"},{"introduced":"3.4.10"},{"last_affected":"3.4.10"},{"introduced":"3.4.11"},{"last_affected":"3.4.11"},{"introduced":"3.4.12"},{"last_affected":"3.4.12"},{"introduced":"3.4.13"},{"last_affected":"3.4.13"},{"introduced":"4.2.0"},{"last_affected":"4.2.0"},{"introduced":"4.2.1"},{"last_affected":"4.2.1"},{"introduced":"4.2.2"},{"last_affected":"4.2.2"},{"introduced":"4.2.3"},{"last_affected":"4.2.3"},{"introduced":"4.2.4"},{"last_affected":"4.2.4"},{"introduced":"4.2.5"},{"last_affected":"4.2.5"},{"introduced":"4.2.6"},{"last_affected":"4.2.6"},{"introduced":"4.2.7"},{"last_affected":"4.2.7"},{"introduced":"4.2.8"},{"last_affected":"4.2.8"},{"introduced":"4.2.9"},{"last_affected":"4.2.9"},{"introduced":"4.2.10"},{"last_affected":"4.2.10"},{"introduced":"4.3.0"},{"last_affected":"4.3.0"},{"introduced":"4.3.1"},{"last_affected":"4.3.1"},{"introduced":"4.3.2"},{"last_affected":"4.3.2"},{"introduced":"4.3.3"},{"last_affected":"4.3.3"},{"introduced":"4.3.4"},{"last_affected":"4.3.4"},{"introduced":"4.3.5"},{"last_affected":"4.3.5"},{"introduced":"4.3.6"},{"last_affected":"4.3.6"},{"introduced":"4.3.7"},{"last_affected":"4.3.7"},{"introduced":"4.3.8"},{"last_affected":"4.3.8"},{"introduced":"4.4.0"},{"last_affected":"4.4.0"},{"introduced":"4.4.1"},{"last_affected":"4.4.1"},{"introduced":"4.4.2"},{"last_affected":"4.4.2"},{"introduced":"4.4.3"},{"last_affected":"4.4.3"},{"introduced":"4.4.4"},{"last_affected":"4.4.4"},{"introduced":"4.4.5"},{"last_affected":"4.4.5"},{"introduced":"5.1.0"},{"last_affected":"5.1.0"},{"introduced":"5.1.1"},{"last_affected":"5.1.1"},{"introduced":"5.1.2"},{"last_affected":"5.1.2"},{"introduced":"5.1.3"},{"last_affected":"5.1.3"},{"introduced":"5.1.4"},{"last_affected":"5.1.4"},{"introduced":"5.1.5"},{"last_affected":"5.1.5"},{"introduced":"5.1.6"},{"last_affected":"5.1.6"},{"introduced":"6.1.0"},{"last_affected":"6.1.0"},{"introduced":"6.1.1"},{"last_affected":"6.1.1"},{"introduced":"6.1.2"},{"last_affected":"6.1.2"},{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"7.0.0"},{"last_affected":"7.0.0"},{"introduced":"7.0.1"},{"last_affected":"7.0.1"},{"introduced":"7.0.2"},{"last_affected":"7.0.2"},{"introduced":"7.1"},{"last_affected":"7.1"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"VulDB","cwe_ids":["CWE-119","CWE-121"]},"references":[{"type":"WEB","url":"https://ffmpeg.org/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1594.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1594"},{"type":"ADVISORY","url":"https://vuldb.com/?id.296589"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.496929"},{"type":"REPORT","url":"https://trac.ffmpeg.org/attachment/ticket/11418/poc"},{"type":"REPORT","url":"https://trac.ffmpeg.org/ticket/11418#comment:3"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.296589"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"0"},{"last_affected":"6b213175c90534e0ad1924bfeba2cf7e20db5bf2"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"7.1"}]}}],"versions":["n7.1-dev","n6.2-dev","n6.1-dev","n5.2-dev","n5.1-dev","n4.5-dev","n4.4-dev","n4.3-dev","n4.2-dev","n4.1-dev","n3.5-dev","n3.4-dev","n3.3-dev","n3.2-dev","n3.1-dev","n2.9-dev","n2.8-dev","n2.7-dev","n2.6-dev","n2.5-dev","n2.4-dev","n2.3-dev","n2.2-dev","n2.0","n2.1-dev","n1.3-dev","n1.2-dev","n1.1-dev","n0.12-dev","n0.11-dev","n0.8","N"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1594.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"0"},{"last_affected":"6b213175c90534e0ad1924bfeba2cf7e20db5bf2"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"7.1"}]}}],"versions":["n7.1-dev","n6.2-dev","n6.1-dev","n5.2-dev","n5.1-dev","n4.5-dev","n4.4-dev","n4.3-dev","n4.2-dev","n4.1-dev","n3.5-dev","n3.4-dev","n3.3-dev","n3.2-dev","n3.1-dev","n2.9-dev","n2.8-dev","n2.7-dev","n2.6-dev","n2.5-dev","n2.4-dev","n2.3-dev","n2.2-dev","n2.0","n2.1-dev","n1.3-dev","n1.2-dev","n1.1-dev","n0.12-dev","n0.11-dev","n0.8","N"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1594.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}]}