9 matches found
CVE-2026-52297
A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted MOV file is parsed due to insufficiently padded extradata. This vulnerability can lead to an application crash, resulting in a denial of service. Mitigation Do not parse untrusted files with the MOV demuxer in...
CVE-2026-52296
A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted file is encoded into the WMA Windows Media Audio format due to a missing required padding in extradata allocation. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not...
CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
UBUNTU-CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
DEBIAN-CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
PT-2026-90980
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0 Description An out-of-bounds read occurs during the MOV parsing process due to insufficiently padded extradata. This issue is located within the mov read iacb function in the libavformat/mov.c file. Recommendations...
CVE-2026-52296
FFmpeg versions before 9.0 are vulnerable to an out-of-bounds read due to missing required padding in WMA extradata allocation paths within libavcodec/wmaenc.c. This flaw can be triggered when a specially crafted file is encoded into the WMA (Windows Media Audio) format, potentially resulting in ...
CVE-2026-52297
FFmpeg versions before 9.0 are vulnerable to an out-of-bounds read within the MOV parsing path, specifically in the mov_read_iacb function located in libavformat/mov.c. The root cause is insufficiently padded extradata . An attacker can trigger this vulnerability by providing a specially crafted ...
