Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18393

Опубликовано: 28 авг. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

EPSS

Процентиль: 17%
0.00255
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.4
ubuntu
24 дня назад

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

CVSS3: 5.4
redhat
5 месяцев назад

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

CVSS3: 5.4
debian
24 дня назад

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes bey ...

CVSS3: 5.4
github
24 дня назад

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

EPSS

Процентиль: 17%
0.00255
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-787