PT-2026-33237 · FFmpeg+2 · Ffmpeg+2

CVE-2026-40962 · Publicado 2026-03-02 · Atualizado 2026-07-09

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg versões anteriores a 8.1

Description Um overflow de inteiro existe no processamento de dados de subsample CENC (Common Encryption) dentro do componente libavformat/mov.c, o que pode levar a uma gravação fora dos limites (out-of-bounds write).

Recommendations Atualize para a versão 8.1 ou posterior.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

BDU:2026-05549

CVE-2026-40962

JLSEC-2026-652

OESA-2026-2928

OPENSUSE-SU-2026:10767-1

OPENSUSE-SU-2026:10768-1

OPENSUSE-SU-2026:20726-1

OPENSUSE-SU-2026:21211-1

SUSE-SU-2026:2444-1

SUSE-SU-2026:2445-1

USN-8469-1

Produtos afetados

Ffmpeg

Linuxmint

Ubuntu

Referências · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40962.json · Exploit
• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22348 · Correção
• https://osv.dev/vulnerability/USN-8469-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20262444-1 · Nota
• https://suse.com/security/cve/CVE-2025-63757 · Nota
• https://bugzilla.suse.com/1255392 · Nota
• https://reddit.com/r/ClaudeAI/comments/1ttkpoy/trying_to_see_if_mythos_claims_are_verified_or_not · Publicação no Reddit
• https://suse.com/security/cve/CVE-2025-59728 · Nota
• https://cve.org/CVERecord?id=CVE-2026-40962 · Nota de Segurança
• https://bugzilla.suse.com/1249393 · Nota
• https://suse.com/security/cve/CVE-2025-10256 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20262445-1 · Nota
• https://osv.dev/vulnerability/CVE-2026-40962 · Aviso do Fabricante
• https://bugzilla.suse.com/1237561 · Nota
• https://bugzilla.suse.com/1262047 · Nota