Lucene search
+L

ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

🗓️ 30 Sep 2026 19:04:42Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 4 Views

Remote arbitrary code execution in FFmpeg via MACE6 audio decoder CAF file.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2026-66039
24 Jul 202619:42
–attackerkb
alpinelinux
AlpineLinux
CVE-2026-66039
24 Jul 202619:42
–alpinelinux
bdu_fstec
BDU FSTEC
The vulnerability of the MACE6 decoder for audio formats in the FFmpeg multimedia library allows a perpetrator to damage memory, cause system failures, or execute arbitrary code.
25 Sep 202600:00
–bdu_fstec
cgr
Chainguard
CVE-2026-66039 vulnerabilities
21 Sep 202608:54
–cgr
circl
Circl
CVE-2026-66039
24 Jul 202622:01
–circl
cve
CVE
CVE-2026-66039
24 Jul 202619:42
–cve
cvelist
Cvelist
CVE-2026-66039 FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
24 Jul 202619:42
–cvelist
debiancve
Debian CVE
CVE-2026-66039
24 Jul 202619:42
–debiancve
euvd
EUVD
EUVD-2026-48741
24 Jul 202619:42
–euvd
fedora
Fedora
[SECURITY] Fedora 44 Update: ffmpeg-8.1.3-1.fc44
1 Oct 202601:13
–fedora
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux9aarch64ffmpeg-debuginfo6.1.6-9.el9aiffmpeg-debuginfo-6.1.6-9.el9ai.aarch64.rpm
Red Hat Enterprise Linux9ppc64leffmpeg-debuginfo6.1.6-9.el9aiffmpeg-debuginfo-6.1.6-9.el9ai.ppc64le.rpm
Red Hat Enterprise Linux9s390xffmpeg-debuginfo6.1.6-9.el9aiffmpeg-debuginfo-6.1.6-9.el9ai.s390x.rpm
Red Hat Enterprise Linux9x86_64ffmpeg-debuginfo6.1.6-9.el9aiffmpeg-debuginfo-6.1.6-9.el9ai.x86_64.rpm
Red Hat Enterprise Linux9aarch64ffmpeg-debugsource6.1.6-9.el9aiffmpeg-debugsource-6.1.6-9.el9ai.aarch64.rpm
Red Hat Enterprise Linux9ppc64leffmpeg-debugsource6.1.6-9.el9aiffmpeg-debugsource-6.1.6-9.el9ai.ppc64le.rpm
Red Hat Enterprise Linux9s390xffmpeg-debugsource6.1.6-9.el9aiffmpeg-debugsource-6.1.6-9.el9ai.s390x.rpm
Red Hat Enterprise Linux9x86_64ffmpeg-debugsource6.1.6-9.el9aiffmpeg-debugsource-6.1.6-9.el9ai.x86_64.rpm
Red Hat Enterprise Linux9aarch64ffmpeg-free-rhai6.1.6-9.el9aiffmpeg-free-rhai-6.1.6-9.el9ai.aarch64.rpm
Red Hat Enterprise Linux9ppc64leffmpeg-free-rhai6.1.6-9.el9aiffmpeg-free-rhai-6.1.6-9.el9ai.ppc64le.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 Oct 2026 02:18Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.17.8 - 8.8
CVSS 48.7
EPSS0.0044
SSVC
4