Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerabilities (USN-8716-1)

🗓️ 10 Sep 2026 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 8 Views

FFmpeg on Ubuntu 18.04-24.04 LTS: multiple crafted input flaws enable DoS or code execution.

Related
Refs
Code
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2026-65704
23 Jul 202618:55
–attackerkb
attackerkb
ATTACKERKB		CVE-2026-64830
22 Jul 202616:33
–attackerkb
attackerkb
ATTACKERKB		CVE-2026-65703
23 Jul 202618:52
–attackerkb
attackerkb
ATTACKERKB		CVE-2026-65705
23 Jul 202619:00
–attackerkb
attackerkb
ATTACKERKB		CVE-2026-65706
23 Jul 202619:05
–attackerkb
alpinelinux
AlpineLinux		CVE-2026-64830
22 Jul 202616:33
–alpinelinux
alpinelinux
AlpineLinux		CVE-2026-64832
22 Jul 202617:01
–alpinelinux
alpinelinux
AlpineLinux		CVE-2026-64833
22 Jul 202617:03
–alpinelinux
alpinelinux
AlpineLinux		CVE-2026-64834
22 Jul 202617:06
–alpinelinux
alpinelinux
AlpineLinux		CVE-2026-64835
22 Jul 202617:24
–alpinelinux
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-8716-1. The text
# itself is copyright (C) Canonical, Inc. See
# <https://ubuntu.com/security/notices>. Ubuntu(R) is a registered
# trademark of Canonical, Inc.
##

include('compat.inc');

if (description)
{
  script_id(344622);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/10");

  script_cve_id(
    "CVE-2026-64830",
    "CVE-2026-64832",
    "CVE-2026-64833",
    "CVE-2026-64834",
    "CVE-2026-64835",
    "CVE-2026-65703",
    "CVE-2026-65704",
    "CVE-2026-65705",
    "CVE-2026-65706",
    "CVE-2026-75141",
    "CVE-2026-75142",
    "CVE-2026-75143",
    "CVE-2026-75144",
    "CVE-2026-75146"
  );
  script_xref(name:"IAVB", value:"2026-B-0169-S");
  script_xref(name:"IAVB", value:"2026-B-0227");
  script_xref(name:"USN", value:"8716-1");

  script_name(english:"Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerabilities (USN-8716-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by
multiple vulnerabilities as referenced in the USN-8716-1 advisory.

    It was discovered that FFmpeg incorrectly handled certain crafted media files in the VobSub subtitle
    demuxer. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2026-64830)

    It was discovered that FFmpeg incorrectly handled certain crafted DTS audio streams in the S/PDIF muxer.
    An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
    (CVE-2026-64833)

    It was discovered that FFmpeg incorrectly handled certain crafted RTP/ASF streams. An attacker could
    possibly use this issue to cause a denial of service. (CVE-2026-64834)

    It was discovered that FFmpeg incorrectly handled certain crafted ADX audio files. This issue only
    affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-64835)

    It was discovered that FFmpeg incorrectly handled certain crafted AVI files in the TDSC video decoder. An
    attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2026-65703)

    It was discovered that FFmpeg incorrectly handled certain crafted ffconcat files processed via the TY
    demuxer. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.
    (CVE-2026-65704)

    It was discovered that FFmpeg incorrectly handled certain crafted video streams in the vf_floodfill video
    filter. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04
    LTS. (CVE-2026-65705)

    It was discovered that FFmpeg incorrectly handled certain crafted NV12 video frames in the vf_swaprect
    video filter. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu
    24.04 LTS. (CVE-2026-65706)

    It was discovered that FFmpeg incorrectly handled certain crafted hvcC NAL arrays in the HEVC parser. An
    attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
    (CVE-2026-75141)

    It was discovered that FFmpeg incorrectly handled certain crafted MPEG system headers. An attacker could
    possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-75142)

    It was discovered that FFmpeg incorrectly handled certain crafted network input in the librist protocol
    handler. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-75143)

    It was discovered that FFmpeg incorrectly handled certain crafted Dirac data units in the VC2 HQ RTP
    packetizer. An attacker could possibly use this issue to cause a denial of service or execute arbitrary
    code. (CVE-2026-75144)

    It was discovered that FFmpeg incorrectly handled certain crafted DASH manifests. This issue only affected
    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-75146)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-8716-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-75143");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/06/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/10");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:ffmpeg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec-extra57");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec-extra58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec-extra60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec57");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavcodec60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavdevice57");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavdevice58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavdevice60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter-extra6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter-extra7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter-extra9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter6");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavfilter9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat-extra");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat-extra58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat-extra60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat57");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavformat60");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavresample3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavresample4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavutil55");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavutil56");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libavutil58");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpostproc54");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpostproc55");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpostproc57");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswresample2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswresample3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswresample4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswscale4");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswscale5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libswscale7");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2026 Canonical, Inc. / NASL script (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('18.04' >< os_release || '20.04' >< os_release || '22.04' >< os_release || '24.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 18.04 / 20.04 / 22.04 / 24.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '18.04', 'pkgname': 'ffmpeg', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavcodec-extra', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavcodec-extra57', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavcodec57', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavdevice57', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavfilter-extra', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavfilter-extra6', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavfilter6', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavformat57', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavresample3', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libavutil55', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libpostproc54', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libswresample2', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '18.04', 'pkgname': 'libswscale4', 'pkgver': '7:3.4.11-0ubuntu0.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'ffmpeg', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavcodec-extra', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavcodec-extra58', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavcodec58', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavdevice58', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavfilter-extra', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavfilter-extra7', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavfilter7', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavformat58', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavresample4', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libavutil56', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libpostproc55', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libswresample3', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '20.04', 'pkgname': 'libswscale5', 'pkgver': '7:4.2.7-0ubuntu0.1+esm16', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'ffmpeg', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavcodec-extra', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavcodec-extra58', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavcodec58', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavdevice58', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavfilter-extra', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavfilter-extra7', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavfilter7', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavformat-extra', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavformat-extra58', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavformat58', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libavutil56', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libpostproc55', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libswresample3', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '22.04', 'pkgname': 'libswscale5', 'pkgver': '7:4.4.2-0ubuntu0.22.04.1+esm15', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'ffmpeg', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavcodec-extra', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavcodec-extra60', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavcodec60', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavdevice60', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavfilter-extra', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavfilter-extra9', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavfilter9', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavformat-extra', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavformat-extra60', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavformat60', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libavutil58', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libpostproc57', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libswresample4', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']},
    {'osver': '24.04', 'pkgname': 'libswscale7', 'pkgver': '7:6.1.1-3ubuntu5+esm13', 'cves': ['CVE-2026-64830', 'CVE-2026-64833', 'CVE-2026-64834', 'CVE-2026-64835', 'CVE-2026-65703', 'CVE-2026-65704', 'CVE-2026-65705', 'CVE-2026-65706', 'CVE-2026-75141', 'CVE-2026-75142', 'CVE-2026-75143', 'CVE-2026-75144', 'CVE-2026-75146']}
];

var flag = 0;
foreach var package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
  if (osver && pkgname && pkgver) {
    if (deb_check(release:osver, prefix:pkgname, reference:pkgver, cves:cves)) flag++;
  }
}

if (flag)
{
  var extra = '';
  extra += ubuntu_report_get();
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : extra
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'ffmpeg / libavcodec-extra / libavcodec-extra57 / libavcodec-extra58 / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
10 Sep 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 49.3
CVSS 3.19.8
EPSS0.00503
SSVC
FFmpegUbuntu LTScrafted inputdenial of servicearbitrary code executionsubtitle demuxervideo filter
8