RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67309)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67309 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67303)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67303 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

RHEL 9 : RHEL AI 3.3 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67276)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67276 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

PT-2026-91456

A vulnerability was found in FFmpeg 8.0.x. This affects the function parse playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target duration results in denial of service. The attack is possible to be carried out...

CVE-2026-90816: Improper Resource Shutdown or Release

A vulnerability was found in FFmpeg 8.0.x. This affects the function parseplaylist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/targetduration results in denial of service. The attack is possible to be carried out remotely...

PT-2026-91445

A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup 3x3 of the file libavfilter/vf convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The...

Ubuntu 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-8750-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8750-1 advisory. Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into...

Linux Distros Unpatched Vulnerability : CVE-2026-52296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. CVE-2026-52296 Note th...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of padding in the extradata allocation process within WMA encoding. An attacker can cause a denial of service by triggering an out-of-bounds read through specially crafted input data...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MOV parsing in movreadiacb due to insufficient padding of extradata. An attacker can cause a denial of service by triggering an out-of-bounds read when processing specially crafted MOV files. Remediation Upgrad...

UBUNTU-CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

DEBIAN-CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

UBUNTU-CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

DEBIAN-CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

MGASA-2026-0398 Updated ffmpeg package fixes security vulnerabilities

Out-of-Bounds Write in RASC Decoder decodedlta. CVE-2026-58049 Heap Buffer Overflow via VobSub Subtitle Demuxer. CVE-2026-64830 Double-Free in NVDEC Hardware Decoder via nvdec.c. CVE-2026-64832 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c. CVE-2026-64833 Infinite Loop DoS via RTP/ASF Demuxer...

Updated ffmpeg package fixes security vulnerabilities

Out-of-Bounds Write in RASC Decoder decodedlta. CVE-2026-58049 Heap Buffer Overflow via VobSub Subtitle Demuxer. CVE-2026-64830 Double-Free in NVDEC Hardware Decoder via nvdec.c. CVE-2026-64832 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c. CVE-2026-64833 Infinite Loop DoS via RTP/ASF Demuxer...