CVE-2026-52297

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted MOV file is parsed due to insufficiently padded extradata. This vulnerability can lead to an application crash, resulting in a denial of service. Mitigation Do not parse untrusted files with the MOV demuxer in...

CVE-2026-52296

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted file is encoded into the WMA Windows Media Audio format due to a missing required padding in extradata allocation. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

UBUNTU-CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

DEBIAN-CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52297

FFmpeg versions before 9.0 are vulnerable to an out-of-bounds read within the MOV parsing path, specifically in the mov_read_iacb function located in libavformat/mov.c. The root cause is insufficiently padded extradata . An attacker can trigger this vulnerability by providing a specially crafted ...

PT-2026-90980

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0 Description An out-of-bounds read occurs during the MOV parsing process due to insufficiently padded extradata. This issue is located within the mov read iacb function in the libavformat/mov.c file. Recommendations...

CVE-2026-52296

FFmpeg versions before 9.0 are vulnerable to an out-of-bounds read due to missing required padding in WMA extradata allocation paths within libavcodec/wmaenc.c. This flaw can be triggered when a specially crafted file is encoded into the WMA (Windows Media Audio) format, potentially resulting in ...