Description

A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.

INFO

Published Date :

2026-02-18T20:26:46.867Z

Last Modified :

2026-02-25T16:55:10.204Z

Source :

fedora
AFFECTED PRODUCTS

The following products are affected by CVE-2025-10256 vulnerability.

Vendors Products
Ffmpeg
  • Ffmpeg
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-10256.

URL Resource
https://access.redhat.com/security/cve/CVE-2025-10256 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2394495 cve-icon cve-icon
https://github.com/FFmpeg/FFmpeg/commit/a25462482c02c004d685a8fcf2fa63955aaa0931 cve-icon cve-icon
https://github.com/FFmpeg/FFmpeg/commit/d3be186ed1bcdcf2c093d6b13a0e66dc5132be2a cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact