<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: libav</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-8586: A vulnerability, which was classified as problematic, was found in libav up to 12.3</title><link>https://patchthecve.com/cve/CVE-2025-8586.html</link><guid>https://patchthecve.com/cve/CVE-2025-8586.html</guid><pubDate>Wed, 17 Jun 2026 10:07:16 +0000</pubDate><description>LOW 3.3: A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local</description></item><item><title>CVE-2025-8585: A vulnerability, which was classified as critical, has been found in libav up to 12.3</title><link>https://patchthecve.com/cve/CVE-2025-8585.html</link><guid>https://patchthecve.com/cve/CVE-2025-8585.html</guid><pubDate>Wed, 17 Jun 2026 10:07:16 +0000</pubDate><description>MEDIUM 5.3: A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a requirement. The exploit has been disclose</description></item><item><title>CVE-2025-8584: A vulnerability classified as problematic was found in libav up to 12.3</title><link>https://patchthecve.com/cve/CVE-2025-8584.html</link><guid>https://patchthecve.com/cve/CVE-2025-8584.html</guid><pubDate>Wed, 17 Jun 2026 10:07:16 +0000</pubDate><description>LOW 3.3: A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attac</description></item></channel></rss>