PT-2026-64154 · FFmpeg · Ffmpeg

Adrian Junge · CVE-2026-65703 · Published 2026-07-23 · Updated 2026-07-23

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc parse tdsf() function fails to unreference the existing reference frame before calling av frame get buffer(), causing tdsc blit() and tdsc yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-65703

Affected Products

Ffmpeg

References · 4

• https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-65703 · Security Note
• https://vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder · Note
• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773 · Note