11027 matches found
CVE-2026-30754: Out-of-bounds Write
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-30754
FFmpeg versions prior to 8.1 are susceptible to a memory corruption vulnerability within the RTP encoding process. The issue resides in the nal_send function of libavformat/rtpenc_h264_hevc.c, where a crafted input file can cause a negative size parameter (size=-3) to be passed to memcpy during H...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
PT-2026-88459
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1 Description Memory corruption occurs during the RTP encoding process when transmitting H.264/HEVC streams via RTP using a crafted input file. In the nal send function within libavformat/rtpenc h264 hevc.c, a negati...
EUVD-2026-74264
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
OPENSUSE-SU-2026:11716-1 ffmpeg-4-4.4.8-5.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-5.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
ROS-20260907-73-0038
The vulnerability in ffmpeg relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a attacker to cause a service failure...
ROS-20260907-73-0032
The vulnerability in ffmpeg is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260907-73-0035
The vulnerability in ffmpeg is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a system failure...
ROS-20260907-73-0036
The vulnerability in ffmpeg is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260907-73-0039
The vulnerability in ffmpeg is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260907-73-0040
The vulnerability in ffmpeg is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260907-73-0041
The vulnerability in ffmpeg is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260907-73-0037
The vulnerability in ffmpeg is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...