CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

EUVD-2026-47748

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64831 FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64831

CVE-2026-64831 affects FFmpeg 8.0–8.1.2 and concerns the Vulkan HEVC (H.265) hardware decoder. The vulnerability is a stack buffer overflow triggered by a crafted HEVC/H.265 bitstream that can overflow stack-allocated arrays in the vk_hevc_end_frame function by embedding a malicious vps_num_hrd_p...

CVE-2026-64831 FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

CVE-2026-64830 FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

PT-2026-63434

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.1 through 8.1.2 Description A heap buffer overflow exists in the VobSub subtitle demuxer. An attacker can corrupt adjacent heap memory by providing a malicious .sub/.idx subtitle file that declares more distinct stream IDs th...

RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:43711)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43711 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

PT-2026-63435

Name of the Vulnerable Software and Affected Versions FFmpeg versions 8.0 through 8.1.2 Description A stack buffer overflow exists in the Vulkan HEVC hardware decoder. A remote attacker can overwrite return addresses and adjacent stack frames by providing a specially crafted HEVC/H.265 bitstream...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3149-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3149-1 advisory. This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter...

Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

SUSE-SU-2026:3149-1 Security update for ffmpeg

This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431...

ANT-2026-RXSADDFE · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-RXSADDFE: Heap-buffer-overflow in g2meet.c:486 While...

ANT-2026-HJ61D4C3 · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude high · Security research firm medium · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-HJ61D4C3: Heap-buffer-overflow in vfboxblur.c:157 A...

ANT-2026-TJ0ZJHM6 · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude critical · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-TJ0ZJHM6: Heap-buffer-overflow in assenc.c:18...