USN-7982-1: FFmpeg vulnerabilities

Publication date

27 January 2026

Overview

Several security issues were fixed in FFmpeg.


Packages

  • ffmpeg - Tools for transcoding, streaming and playing of multimedia files

Details

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10.
(CVE-2025-59728)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-59731,
CVE-2025-59732)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS, Ubuntu...

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10.
(CVE-2025-59728)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-59731,
CVE-2025-59732)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS
and Ubuntu 25.10. (CVE-2025-59733)

It was discovered that FFmpeg did not correctly handle certain integer
arithmetic operations. An attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. (CVE-2025-63757)


Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
25.10 questing ffmpeg –  7:7.1.1-1ubuntu4.2
libavcodec61 –  7:7.1.1-1ubuntu4.2
libavformat61 –  7:7.1.1-1ubuntu4.2
24.04 LTS noble ffmpeg –  7:6.1.1-3ubuntu5+esm7  
libavcodec60 –  7:6.1.1-3ubuntu5+esm7  
libavformat60 –  7:6.1.1-3ubuntu5+esm7  
22.04 LTS jammy ffmpeg –  7:4.4.2-0ubuntu0.22.04.1+esm11  
libavcodec58 –  7:4.4.2-0ubuntu0.22.04.1+esm11  
libavformat58 –  7:4.4.2-0ubuntu0.22.04.1+esm11  
20.04 LTS focal ffmpeg –  7:4.2.7-0ubuntu0.1+esm12  
libavcodec58 –  7:4.2.7-0ubuntu0.1+esm12  
libavformat58 –  7:4.2.7-0ubuntu0.1+esm12  
18.04 LTS bionic ffmpeg –  7:3.4.11-0ubuntu0.1+esm12  
libavcodec57 –  7:3.4.11-0ubuntu0.1+esm12  
libavformat57 –  7:3.4.11-0ubuntu0.1+esm12  
16.04 LTS xenial ffmpeg –  7:2.8.17-0ubuntu0.1+esm14  
libavcodec-extra –  7:2.8.17-0ubuntu0.1+esm14  
libavcodec-ffmpeg56 –  7:2.8.17-0ubuntu0.1+esm14  
libavformat-ffmpeg56 –  7:2.8.17-0ubuntu0.1+esm14  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›