Red Hat Security Advisory

RHSA-2026:67276

RHEL AI 3.3 RPM runtime CVE fix - ffmpeg

Released 2026-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AI 3.3 for RHEL 9 ffmpeg-6.1.6-9.el9ai, ffmpeg-free-rhai-6.1.6-9.el9ai, ffmpeg-free-rhai-devel-6.1.6-9.el9ai +16

Fixes 1 record

TI-2026-46355 CVE-2026-64830 · GHSA-jphx-q7f7-4x8r

FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

MEDIUM 41

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00646 Published 2026-07-22 Partial fix CWE-122