CVE-2026-40962

Опубликовано: 16 апр. 2026

Источник: nvd

CVSS3: 4.9

CVSS3: 9.8

EPSS Низкий

Описание

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Ссылки

https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22348
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*

Версия до 8.1 (исключая)

EPSS

Процентиль: 3%

0.00134

Низкий

4.9 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-40962

CVSS3: 4.9

ubuntu

4 месяца назад

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

CVE-2026-40962

CVSS3: 4.8

redhat

4 месяца назад

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

CVE-2026-40962

CVSS3: 4.9

debian

4 месяца назад

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds ...

openSUSE-SU-2026:20726-1

suse-cvrf

3 месяца назад

Security update for ffmpeg-4

GHSA-48wr-p98v-9w5h

CVSS3: 4.9

github

4 месяца назад

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

EPSS

Процентиль: 3%

0.00134

Низкий

4.9 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-190