Skip to content

CVE-2025-10256 on CTRL-OS 24.05

Packages: ffmpeg

Status: New

CVE Information

A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.

Updates

2026-04-07 18:13 CEST

Metadata changes:

  • Status for package ffmpeg: “New”