CVE-2025-7700
Publication date 18 July 2025
Last updated 12 November 2025
Ubuntu priority
Description
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| ffmpeg | 25.10 questing |
Vulnerable
|
| 25.04 plucky |
Vulnerable
|
|
| 24.04 LTS noble |
Fixed 7:6.1.1-3ubuntu5+esm6
|
|
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal | Ignored backport too intrusive | |
| 18.04 LTS bionic | Ignored backport too intrusive | |
| 16.04 LTS xenial |
Not affected
|
|
| libav | 25.10 questing | Not in release |
| 25.04 plucky | Not in release | |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 14.04 LTS trusty |
Needs evaluation
|
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu Pro 30-day free trialSeverity score breakdown
| Parameter | Value |
|---|---|
| Base score |
5.3 · Medium
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | Low |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
References
Related Ubuntu Security Notices (USN)
- USN-7830-1
- FFmpeg vulnerabilities
- 21 October 2025