The FFmpeg multimedia framework contains a vulnerability (CVE-2025-1594) due to improper calculation of LPC order, which can trigger a stack-based buffer overflow. This vulnerability allows an attacker to cause a denial of service by crashing FFmpeg when it processes maliciously crafted input files. The issue affects FFmpeg versions up to 7.1. Ubuntu has issued security advisories and patches for multiple releases, including 25.04, 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. The patches are available via standard system updates or through Ubuntu Pro ESM for older LTS versions. No confirmed exploitation in the wild has been reported.

Successful exploitation can cause FFmpeg to crash, resulting in denial of service. There is a potential risk of code execution due to the stack-based buffer overflow, but this has not been explicitly confirmed or demonstrated. No known active exploits have been reported.

Ubuntu users should apply the available updates to the ffmpeg package as provided in the Ubuntu Security Notice USN-7738-1. For supported releases, a standard system update will apply the fix. For older LTS releases, the fix is available through Ubuntu Pro Extended Security Maintenance (ESM). Users should follow vendor guidance to ensure their systems are updated. No additional mitigation steps are indicated by the vendor advisory.