CVE-2026-88377

Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially crafted MP4 file containing an atom with a declared size smaller than AP4ATOMHEADERSIZE can cause AP4AvccAtom::Create or AP4HvccAtom::Create to underflow the payload-size...

CVE-2026-88377

The Bento4 1.6.0.0 software contains an integer underflow vulnerability within the avcC and hvcC configuration atom parsers . A specially crafted MP4 file with an atom size smaller than AP4_ATOM_HEADER_SIZE causes the payload-size calculation in AP4_AvccAtom::Create() or AP4_HvccAtom::Create() to...

EUVD-2026-86317

Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially crafted MP4 file containing an atom with a declared size smaller than AP4ATOMHEADERSIZE can cause AP4AvccAtom::Create or AP4HvccAtom::Create to underflow the payload-size...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104785 advisory. FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type...

SUSE CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the hvcC box writer. An attacker can cause a denial of service or achieve arbitrary code execution by supplying a crafted HEVC input file that triggers a heap buffer overflow during muxing. Remediation...

Linux Distros Unpatched Vulnerability : CVE-2026-75141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single...

CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-75141 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-75141

FFmpeg versions before commit acf5d7c have a heap buffer overflow in the hvcC box writer. A crafted HEVC file triggers NAL unit count overflow during muxing, leading to memory corruption; CVSS 3.1 scores it HIGH (7.8). No exploitation is confirmed. Upgrade to a version containing the fix commit. ...

CVE-2026-75141 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

EUVD-2026-62578

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-75141: Heap-based Buffer Overflow

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

PT-2026-78524

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent,...

MINI-7JMC-R3C2-HVCC

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2022-27607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531. CVE-2022-27607 Note that Nessus relies on th...

CVE-2023-30699

Out-of-bounds write vulnerability in parserhvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers...

CVE-2023-30699

Out-of-bounds write vulnerability in parserhvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers...

SAMSUNG Mobile devices buffer error vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2023 Release 1 version, which originates from an out-of-bounds write vulnerability in the...

PT-2023-22898 · Libsimba · Libsimba

Name of the Vulnerable Software and Affected Versions: libsimba library versions prior to SMR Aug-2023 Release 1 Description: The issue is an out-of-bounds write vulnerability in the parser hvcC function of the libsimba library. This vulnerability allows code execution by remote attackers...