FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade libavformat62 (Ubuntu Pro)Upgrade libavfilter11 (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra62 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavcodec62 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra60 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec60 (Ubuntu Pro)Upgrade libavformat-extra60 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavformat60 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavformat-extra62 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavfilter9 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro) | Sep 14, 2026 | Sep 3, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub