FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavformat-extra60 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra62 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavformat62 (Ubuntu Pro)Upgrade libavcodec62 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavfilter11 (Ubuntu Pro)Upgrade libavcodec-extra60 (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavcodec60 (Ubuntu Pro)Upgrade libavformat60 (Ubuntu Pro)Upgrade libavfilter9 (Ubuntu Pro)Upgrade libavformat-extra62 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro) | Sep 14, 2026 | Sep 3, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub