PT-2026-78530

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 983dae9 Description An out-of-bounds read exists in the AV1 RTP packetizer within the libavformat/rtpenc av1.c file. The issue occurs during the keyframe detection loop when searching for a sequence header OBU...

PT-2026-78527

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1cdeb3c Description A heap buffer overflow exists in the VC-2/Dirac RTP packetizer within the libavformat/rtpenc vc2hq.c file. The issue occurs because the packetizer copies an input-derived data unit or fragmen...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102684 advisory. Buffer Overflow vulnerability exists in FFmpeg 4.1 via apngdoinverseblend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service...

PT-2026-78524

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent,...

PT-2026-78526

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1c10bcc Description A heap buffer overflow exists in the RIST protocol reader within libavformat/librist.c. The function librist read fails to respect its size argument, copying the entire received payload lengt...

CVE-2026-75146: Out-of-bounds Read

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer libavformat/dashdec.c. When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3632-1 advisory. This update for ffmpeg fixes the following issue: - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead...

OPENSUSE-SU-2026:11545-1 ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

ANT-2026-SJ7ZVBQB · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude high · Security research firm medium · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-SJ7ZVBQB: Heap-buffer-overflow in mpeg.h:70 While...

ANT-2026-NGTJ413W · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-NGTJ413W: This is a genuine heap-buffer-overflow...

ANT-2026-TNDDD6NW · ffmpeg · Stack Buffer Overflow

stack-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-TNDDD6NW: Stack buffer overflow in mpegts.c pmtcb via multiple IOD The MPEG-TS PMT parser in libavformat/mpegts.c allocates a fixed...

ANT-2026-0Y1VS937 · ffmpeg · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0Y1VS937: Heap underflow in H.264 xchgmbborder via slicenum/sentinel collision In FFmpeg's H.264 decoder, slicetable h264dec.h is a...

ANT-2026-PVN0XWJM · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-PVN0XWJM: Heap-buffer-overflow in copyblock.h:51...

ANT-2026-N0ZPQQQ6 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-N0ZPQQQ6: The ASAN report describes a real, plausible...

ANT-2026-BBV63KVS · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-BBV63KVS: Heap-buffer-overflow READ in FFmpeg APV...

ANT-2026-8E67XSC7 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8E67XSC7: Heap-buffer-overflow read in FFmpeg ADPCM...

ANT-2026-4YJK1P9J · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4YJK1P9J: Heap-buffer-overflow in dhav.c:286 While...

ANT-2026-SC8JK49A · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-SC8JK49A: Heap-buffer-overflow in ffmpeg FFmpeg's Dira...

ANT-2026-CEP8Y9M0 · ffmpeg · Use-After-Free

use-after-free high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CEP8Y9M0: avformat/mpegts: reset PES state before JPEG-XS error return In the MPEG-TS demuxer, newpespacket begins transferring ownership of...

Security update for ffmpeg

This update for ffmpeg fixes the following issue: CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution bsc1269490. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...