Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-75141

FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FFmpeg FFmpeg

Default version status: unaffected

  • 0 to < acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781affected
pkg:github/FFmpeg/FFmpeg

References