Skip to content
Threat Feed
Subscribe

Tag

Media

2 briefs RSS
low advisory

FFmpeg RTP/ASF Demuxer Infinite Loop Vulnerability (CVE-2026-64834)

FFmpeg versions 0.6.3 through 8.1.2 are vulnerable to a remote denial of service (DoS) via CVE-2026-64834, allowing an attacker to trigger an infinite loop in the `rtp_asf_fix_header` function by sending a crafted RTP/ASF stream, leading to CPU exhaustion and service unavailability.

FFmpeg denial-of-service vulnerability media
1t 1c
high advisory

FFmpeg VobSub Heap Buffer Overflow Vulnerability (CVE-2026-64830)

FFmpeg versions 2.1 through 8.1.2 contain a heap buffer overflow vulnerability (CVE-2026-64830) in the VobSub subtitle demuxer, allowing attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file, potentially leading to arbitrary code execution in applications using FFmpeg's VobSub demuxer.

FFmpeg 2.1 +1 vulnerability heap-overflow ffmpeg arbitrary-code-execution media
1t 1c