Skip to content
Threat Feed
Subscribe

Product

FFmpeg 2.1

1 brief RSS
high advisory

FFmpeg VobSub Heap Buffer Overflow Vulnerability (CVE-2026-64830)

FFmpeg versions 2.1 through 8.1.2 contain a heap buffer overflow vulnerability (CVE-2026-64830) in the VobSub subtitle demuxer, allowing attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file, potentially leading to arbitrary code execution in applications using FFmpeg's VobSub demuxer.

FFmpeg 2.1 +1 vulnerability heap-overflow ffmpeg arbitrary-code-execution media
1t 1c