CVE-2026-66036

CVE-2026-66036 affects FFmpeg up to version 8.1.2. A heap out-of-bounds write exists in the vf_hqdn3d filter when a crafted video increases frame width between frames and filtergraph reinitialization is disabled (-reinit_filter 0). The vulnerability stems from vf_hqdn3d.config_input() allocating ...