Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: FFmpeg 9.0 Clear all filters
TI-2026-37770 CVE-2026-52297 · GHSA-vp63-fqg3-cph4

Out-of-bounds read in FFmpeg

Priority LOW 30

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00116 Published 2026-09-13 Partial fix · 9.0 CWE-125
TI-2026-37769 CVE-2026-52296 · GHSA-923g-f8rq-pv4w

Out-of-bounds read in FFmpeg

Priority LOW 30

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00158 Published 2026-09-13 Partial fix · 9.0 CWE-125