Skip to content
Threat Feed
Subscribe

Product

FFmpeg 7.0

1 brief RSS
high advisory

FFmpeg Heap Out-of-Bounds Write Vulnerability (CVE-2026-66041)

A heap out-of-bounds write vulnerability exists in the vf_quirc filter of FFmpeg versions 7.0 through 8.1.2, allowing an attacker to corrupt heap memory and potentially achieve arbitrary code execution by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions.

FFmpeg 7.0 +1 ffmpeg vulnerability heap-overflow rce
1c