Lucene search
+L

CVE-2026-75143

🗓️ 19 Aug 2026 16:26:12Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov👁 114 Views🌐 WEB

FFmpeg before 1c10bcc has a heap buffer overflow in librist_read() that ignores its size argument, allowing remote RIST senders to overflow the caller buffer and crash or execute code.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2026-75143
19 Aug 202618:01
–circl
cvelist
Cvelist
CVE-2026-75143 FFmpeg Heap Buffer Overflow via RIST Protocol Reader
19 Aug 202616:26
–cvelist
debiancve
Debian CVE
CVE-2026-75143
19 Aug 202616:26
–debiancve
euvd
EUVD
EUVD-2026-62580
19 Aug 202616:26
–euvd
kitploit
Kitploit
1day-archive
29 Sep 202612:44
–kitploit
mageia
Mageia
Updated ffmpeg package fixes security vulnerabilities
13 Sep 202605:39
–mageia
nvd
NVD
CVE-2026-75143
19 Aug 202617:21
–nvd
opensuse
OPENSUSE Linux
ffmpeg-7-7.1.5-2.1 on GA media (moderate)
4 Sep 202600:00
–opensuse
opensuse
OPENSUSE Linux
ffmpeg-8-8.1.2-3.1 on GA media (moderate)
5 Sep 202600:00
–opensuse
opensuse
OPENSUSE Linux
Security update for ffmpeg-7 (important)
24 Sep 202600:00
–opensuse
Rows per page
Vulners
Node
ffmpegffmpegRange0–1c10bcc2e17255dacb717a25ab3db142ce390602
[
  {
    "vendor": "FFmpeg",
    "product": "FFmpeg",
    "repo": "https://code.ffmpeg.org/FFmpeg/FFmpeg",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1c10bcc2e17255dacb717a25ab3db142ce390602",
        "versionType": "git"
      }
    ],
    "defaultStatus": "unaffected",
    "packageURL": "pkg:github/FFmpeg/FFmpeg"
  }
]
ParameterPositionPathDescriptionCWE
payload-lenbinaryasync:rist://@<addr>:<port>FFmpeg RIST reader heap out-of-bounds write via async:rist:// receiver when oversized RIST payloads are sent; remote unauthenticated DoS.CWE-122
commandbinaryasync:rist://@<addr>:<port>FFmpeg RIST reader heap out-of-bounds write via async:rist:// receiver when oversized RIST payloads are sent; remote unauthenticated DoS.CWE-122

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 Aug 2026 20:37Current
6.3Medium risk
Vulners AI Score6.3
CVSS 49.3
CVSS 3.19.8
EPSS0.00702
SSVC
114