CVE-2025-12343

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnnbackendtf.c source file. The issue occurs in the dnnexecutemodel_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.

References

Affected packages

Git / github.com/ffmpeg/ffmpeg

Affected ranges

Type

GIT

Repo

https://github.com/ffmpeg/ffmpeg

Events

Introduced

47ac3e60653da651dfa064b649d0ac297560d8d5

Fixed

638b521c7b09e00514aa13ade43c389b4b40ddfd

Database specific

{
    "versions": [
        {
            "introduced": "6.1"
        },
        {
            "fixed": "8.1"
        }
    ]
}

Affected versions

n6.*

n6.1-dev

n6.2-dev

n7.*

n7.1-dev

n7.2-dev

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-12343.json"