CVE-2025-10256
A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.
Vendor
Product
CWE
Yayın Tarihi
2026-02-18 21:16:20
Güncelleme
2026-02-26 22:33:18
Source Identifier
patrick@puiterwijk.org
KEV Date Added
-