Skip to content
Threat Feed
Subscribe

Product

FFmpeg (4.4-8.1.2)

1 brief RSS
high advisory

FFmpeg ADX Audio Decoder Out-of-Bounds Memory Access Vulnerability

A high-severity out-of-bounds memory access vulnerability, tracked as CVE-2026-64835, exists in FFmpeg versions 4.4 through 8.1.2 within the ADX audio decoder, allowing attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change, potentially leading to denial of service, information disclosure, or arbitrary code execution.

FFmpeg vulnerability audio-codec memory-corruption denial-of-service remote-code-execution
1c