CVE-2026-30997

Опубликовано: 13 апр. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Ссылки

https://excellent-oatmeal-319.notion.site/CVE-2026-30997-Out-of-Bounds-Access-a7929817b9794568b2f7774397c7d65f
Exploit
Mitigation
Third Party Advisory
https://github.com/FFmpeg/FFmpeg
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*

Версия до 8.0.1 (включая)

EPSS

Процентиль: 26%

0.00337

Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2026-30997

CVSS3: 7.5

ubuntu

4 месяца назад

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-30997

CVSS3: 5.9

redhat

4 месяца назад

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVE-2026-30997

CVSS3: 7.5

debian

4 месяца назад

An out-of-bounds read in the read_global_param() function (libavcodec/ ...

openSUSE-SU-2026:21258-1

suse-cvrf

27 дней назад

Security update for ffmpeg-7

openSUSE-SU-2026:20914-1

suse-cvrf

около 2 месяцев назад

Security update for ffmpeg-4

EPSS

Процентиль: 26%

0.00337

Низкий

7.5 High

CVSS3

Дефекты

CWE-125