CVE-2025-1816

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The manipulation of the argument num_parameters leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 0526535cd58444dd264e810b2f3348b4d96cff3b. It is recommended to apply a patch to fix this issue.

• CWE-401
• CWE-404

• https://ffmpeg.org/
• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0526535cd58444dd264e810b2f3348b4d96cff3b
• https://trac.ffmpeg.org/attachment/ticket/11475/poc
• https://trac.ffmpeg.org/ticket/11475
• https://vuldb.com/?ctiid.298089
• https://vuldb.com/?id.298089
• https://vuldb.com/?submit.506575
• https://trac.ffmpeg.org/ticket/11475

Published

Mar 2, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1810A vulnerability was found in Pixsoft Vivaz 6.0.11. It has be…5.3
• CVE-2025-1811A vulnerability was found in AT Software Solutions ATSVD up …7.3
• CVE-2025-1812A vulnerability classified as critical has been found in zj1…8.8
• CVE-2025-1813A vulnerability classified as problematic was found in zj198…6.5
• CVE-2025-1814A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-1815A vulnerability, which was classified as critical, was found…7.3
• CVE-2025-1817A vulnerability classified as problematic was found in Mini-…5.4
• CVE-2025-1818A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-1819A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-1820A vulnerability has been found in zj1983 zz up to 2024-8 and…8.8
• CVE-2025-1821A vulnerability was found in zj1983 zz up to 2024-8 and clas…9.8
• CVE-2025-1823IBM Jazz Reporting Service could allow an authenticated user…3.5