Most recent entries from all

bdu:2026-05549

EUVD-2026-291583

fkie_cve-2026-40962

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

GHSA-48wr-p98v-9w5h

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

OESA-2026-2928 — ffmpeg security update

Affected: openEuler:24.03-LTS-SP1: ffmpeg

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-30997)

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.(CVE-2026-40962)

openSUSE-SU-2026:10767-1 — ffmpeg-4-4.4.6-12.1 on GA media

ffmpeg-4-4.4.6-12.1 on GA media

RHSA-2026:74089 — Red Hat Security Advisory: RHEL AI 3.0 RPM runtime CVE fix - ffmpeg

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer. FFmpeg: Denial of Service via crafted RTP/ASF stream FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

UBUNTU-CVE-2026-40962

Affected: Ubuntu:Pro:14.04:LTS: libav, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg, Ubuntu:25.10: ffmpeg, Ubuntu:Pro:26.04:LTS: ffmpeg

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

WID-SEC-W-2026-1143 — ffmpeg: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen oder um einen Denial-of-Service-Zustand zu verursachen.