CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-55294

A heap buffer overflow vulnerability exists in the ihevcd_get_tu_data_size function of ihevcd_utils.c within the Media Codecs component. This flaw allows for an out-of-bounds write , which could lead to a local escalation of privilege without requiring additional execution privileges or user inte...

HEVC Video Extensions Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

HEVC Video Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

PT-2026-88459

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1 Description Memory corruption occurs during the RTP encoding process when transmitting H.264/HEVC streams via RTP using a crafted input file. In the nal send function within libavformat/rtpenc h264 hevc.c, a negati...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

EUVD-2026-74264

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

FFmpeg versions prior to 8.1 are susceptible to a memory corruption vulnerability within the RTP encoding process. The issue resides in the nal_send function of libavformat/rtpenc_h264_hevc.c, where a crafted input file can cause a negative size parameter (size=-3) to be passed to memcpy during H...

USN-8716-1 Several security issues were fixed in FFmpeg.

It was discovered that FFmpeg incorrectly handled certain crafted media files in the VobSub subtitle demuxer. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-64830 It was discovered that FFmpeg incorrectly handled certain crafted DTS audi...

USN-8716-1: FFmpeg vulnerabilities

It was discovered that FFmpeg incorrectly handled certain crafted media files in the VobSub subtitle demuxer. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-64830 It was discovered that FFmpeg incorrectly handled certain crafted DTS audi...

OESA-2026-3544 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An improper resource...

OESA-2026-3542 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An improper resource...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104785 advisory. FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type...

SUSE CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the hvcC box writer. An attacker can cause a denial of service or achieve arbitrary code execution by supplying a crafted HEVC input file that triggers a heap buffer overflow during muxing. Remediation...

Linux Distros Unpatched Vulnerability : CVE-2026-75141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single...

CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-75141 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...