CVE-2025-12343
Low
Description
A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.
SeverityLow
CVSS3.3
Exploit probability—
ProductFfmpeg
PublishedFeb 18, 2026
First seenFeb 18, 2026
Weakness typeCWE-415CWE-415
How to fix
Update
- ffmpeg ffmpeg8.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ffmpeg ffmpeg | 6.1 ≤ v < 8.1 | 8.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.