CGA-vw6v-8h9r-7pmq

Published

Last updated

https://images.chainguard.dev/security/CGA-vw6v-8h9r-7pmq

Package

ffmpeg-6

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

CVE-2025-59730
GHSA-3x55-g2vp-hv3w

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-59730
https://github.com/advisories/GHSA-3x55-g2vp-hv3w

Updates

Status

Pending upstream fix

Impact

CVE-2025-59730 is fixed in FFmpeg 8.0 (commit 3ccd7d8c8e85aaae0c6d6cc88ea6cb5309d56cdc). This vulnerability affects the 6.x version stream. At this time, there is no backport available for the 6.x branch. Resolution requires upstream FFmpeg maintainers to backport the security fix to the 6.x stable branch or for users to upgrade to FFmpeg 8.0+. Reference: https://ffmpeg.org/security.html

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-vw6v-8h9r-7pmq

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company