PT-2026-64154 · FFmpeg · Ffmpeg

Adrian Junge · CVE-2026-65703 · Publicado 2026-07-23 · Atualizado 2026-07-23

NVD

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc parse tdsf() function fails to unreference the existing reference frame before calling av frame get buffer(), causing tdsc blit() and tdsc yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2026-65703

Produtos afetados

Ffmpeg

Referências · 4

• https://vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder · Nota
• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773 · Nota
• https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-65703 · Nota de Segurança