CVE-2025-69693
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ffmpeg是meh.个人开发者的一个rust库。 ffmpeg 8.0版本和8.0.1版本存在安全漏洞，该漏洞源于量化参数验证缺失上限检查，可能导致越界读取、内存泄露或崩溃。
Possible ATT&CK Techniques 1 AI
T1135 · Network Share Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-69693
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only checks the lower bound (qp < 0) but is missing upper bound validation. The qp value can reach 65 (base value 63 from 6-bit frame header + offset +2 from read_qp_offset) while the rv60_qp_to_idx array has size 64 (valid indices 0-63). This results in out-of-bounds array access at lines 1554 (decode_cbp8), 1655 (decode_cbp16), and 1419/1421 (get_c4x4_set), potentially leading to memory disclosure or crash. A previous fix in commit 61cbcaf93f added validation only for intra frames. This vulnerability affects the released versions 8.0 (released 2025-08-22) and 8.0.1 (released 2025-11-20) and is fixed in git master commit 8abeb879df which will be included in FFmpeg 8.1.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ffmpeg 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ffmpeg是meh.个人开发者的一个rust库。 ffmpeg 8.0版本和8.0.1版本存在安全漏洞，该漏洞源于量化参数验证缺失上限检查，可能导致越界读取、内存泄露或崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-69693
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-69693
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-69693 (1)
Vendor Pages for CVE-2025-69693 (1)
Other References for CVE-2025-69693 (1)
Same Patch Batch · n/a · 2026-03-16 · 21 CVEs total
| CVE-2026-4234 | 6.3 MEDIUM | SSCMS DDL SitesAddController.Submit.cs sql injection |
| CVE-2026-4240 | 5.3 MEDIUM | Open5GS CCA smf_s6b_sta_cb denial of service |
| CVE-2026-4233 | 4.3 MEDIUM | ThingsGateway download path traversal |
| CVE-2026-4222 | 3.8 LOW | SSCMS download PathUtils.RemoveParentPath path traversal |
| CVE-2026-4218 | 2.5 LOW | myAEDES App aedes.me.beta EngageBayUtils.java information disclosure |
| CVE-2026-4243 | 2.5 LOW | La Nacion App app.lanacion.activity BuildConfig.java credentials storage |
| CVE-2026-4225 | 2.4 LOW | CMS Made Simple User Management listusers.php cross site scripting |
| CVE-2025-69902 | kubectl-mcp-server 安全漏洞 | |
| CVE-2025-50881 | ITFlow 安全漏洞 | |
| CVE-2025-68971 | Forgejo 安全漏洞 | |
| CVE-2025-69768 | Chyrp 安全漏洞 | |
| CVE-2025-69808 | bareiron 安全漏洞 | |
| CVE-2025-69809 | bareiron 安全漏洞 | |
| CVE-2025-69727 | INDEX ÉDUCATION PRONOTE 安全漏洞 | |
| CVE-2025-66687 | Doom Launcher 安全漏洞 | |
| CVE-2025-65734 | GUnet OpenEclass 安全漏洞 | |
| CVE-2026-30405 | GoBGP 安全漏洞 | |
| CVE-2025-69783 | OpenEDR 安全漏洞 | |
| CVE-2025-69784 | OpenEDR 安全漏洞 | |
| CVE-2025-57543 | NetBox 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2025-69693
No comments yet