FFmpeg Double-Free Vulnerability in Audio Stream Handling

A double-free vulnerability has been identified in FFmpeg version n6.1.1, specifically within the audio stream processing function of the fftools component. The issue arises in the 'new_stream_audio' function, where improper management of memory allocation and deallocation creates the potential for exploitation.

Impact

Exploitation of this vulnerability leads to a double-free condition, which can commonly be exploited to execute arbitrary code or cause a denial-of-service by crashing the application.

Reproduction

The vulnerability can be reproduced by using FFmpeg with the '-filter_complex' option to specify an audio source, and then applying the '-apad' option multiple times. This sequence triggers the double-free condition by causing the application to mishandle memory allocation for the audio padding options.

Remediation

Users can upgrade to FFmpeg version n6.1.2 or later, where this vulnerability has been fixed.