SUSE CVE-2026-120210

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

Linux Distros Unpatched Vulnerability : CVE-2026-120210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated...

DEBIAN-CVE-2026-120210

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

CVE-2026-120210

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

CVE-2026-120210

A flaw was found in FFmpeg. An improper path validation issue in the Interoperable Master Format IMF demuxer leads to information disclosure via path traversal. By convincing a user or automated processing service to open a crafted IMF package containing directory traversal sequences or absolute...

CVE-2026-120210

FFmpeg versions 5.0 through 9.0.2 are vulnerable to a path traversal vulnerability in the IMF demuxer . The root cause is the lack of validation on ASSETMAP Path elements, which allows an attacker to provide a crafted IMF package containing '..' or absolute paths. This can be used to access local...

CVE-2026-120210 FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

CVE-2026-120210 FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

EUVD-2026-114731

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

PT-2026-134529

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

CVE-2026-120210: FFmpeg: FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files…

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeNodeList

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5190228531347456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000dd Crash State:...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeProp

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5760819097370624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIMFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000e7 Crash...