OESA-2025-2906

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2906
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2906.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2906
Upstream
Published
2025-12-30T12:17:46Z
Modified
2026-03-11T07:14:41.779416Z
Summary
ffmpeg security update
Details

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.

Security Fix(es):

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.(CVE-2025-7700)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP2 / ffmpeg

Package

Name
ffmpeg
Purl
pkg:rpm/openEuler/ffmpeg&distro=openEuler-24.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.1-24.oe2403sp2

Ecosystem specific 

{
    "src": [
        "ffmpeg-6.1.1-24.oe2403sp2.src.rpm"
    ],
    "x86_64": [
        "ffmpeg-6.1.1-24.oe2403sp2.x86_64.rpm",
        "ffmpeg-debuginfo-6.1.1-24.oe2403sp2.x86_64.rpm",
        "ffmpeg-debugsource-6.1.1-24.oe2403sp2.x86_64.rpm",
        "ffmpeg-devel-6.1.1-24.oe2403sp2.x86_64.rpm",
        "ffmpeg-libs-6.1.1-24.oe2403sp2.x86_64.rpm",
        "libavdevice-6.1.1-24.oe2403sp2.x86_64.rpm"
    ],
    "aarch64": [
        "ffmpeg-6.1.1-24.oe2403sp2.aarch64.rpm",
        "ffmpeg-debuginfo-6.1.1-24.oe2403sp2.aarch64.rpm",
        "ffmpeg-debugsource-6.1.1-24.oe2403sp2.aarch64.rpm",
        "ffmpeg-devel-6.1.1-24.oe2403sp2.aarch64.rpm",
        "ffmpeg-libs-6.1.1-24.oe2403sp2.aarch64.rpm",
        "libavdevice-6.1.1-24.oe2403sp2.aarch64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2025-2906.json"