CVE-2026-107695

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that...

EUVD-2026-95123

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that...

CVE-2026-107695

FFmpeg versions prior to 8.1.3 are vulnerable to an infinite loop within the HLS demuxer . The root cause is that the parse_playlist() function incorrectly accepts Master Playlist tags inside Media Playlists . A remote attacker can exploit this by tricking a victim into opening a crafted, self-re...