9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-25467

CVE-2025-25467: Insufficient tracking and releasing of allocated used memory in libx264 git master allows...

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-25467

CVE-2025-25467:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis is primarily based on the information provided in the GitLab issue #75 for x264, as direct commit/patch information was not available. The issue explicitly identifies 'x264_encoder_open()' as the function that fails to perform proper cleanup, leading to a memory leak. The provided ASan (AddressSanitizer) logs in the issue confirm memory leaks originating from allocations (like malloc, strdup, or their wrappers) that occur during the encoder initialization process, which is managed by 'x264_encoder_open'. The vulnerability is described as 'Insufficient tracking and releasing of allocated used memory', and 'x264_encoder_open' is the entry point for setting up the encoder where such resources are allocated and should be managed, especially in error paths. While the ASan log points to low-level allocation functions like 'interceptor_malloc' and 'interceptor_strdup', these are tools for detecting the leak; the bug itself lies in the calling code within libx264 (specifically, the logic within or called by 'x264_encoder_open') that fails to deallocate the memory. The description of the vulnerability (related to processing a crafted AAC file, though x264 is a video encoder, suggesting it's used in a larger pipeline like FFmpeg) aligns with an issue during the setup phase handled by 'x264_encoder_open'.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.