CVE-2025-12343CWE-415

Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend

Low · published February 18, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() function, where a task object is freed multiple times in certain error-handling paths. This redundant memory deallocation can lead to a double-free condition, potentially causing FFmpeg or any application using it to crash when processing TensorFlow-based DNN models. This results in a denial-of-service scenario but does not allow arbitrary code execution under normal conditions.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.5th percentile
Weakness
CWE-415 · Double Free
Published
2026-02-18T20:28Z
EPSS history
Timeline
  • 18 FEB 20:28Z
    Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend
    cvelistv5