Skip to content
fr Sign in
8.6 High

CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before…

Description

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.

Affected products and versions

Product Affected versions Fixed in
FFMPEG Versions not published
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat AI Inference Server Versions not published
Red Hat Enterprise Linux AI 3.5 for RHEL 9 Versions not published
Red Hat Enterprise Linux AI 3.3 for RHEL 9 Versions not published
Red Hat Enterprise Linux AI 3.0 for RHEL 9 Versions not published
Red Hat Enterprise Linux AI 3.2 for RHEL 9 Versions not published
Red Hat OpenShift AI 3.4 1787076481 earliest → < 1787076481 1787076481

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FFMPEG

The 83 CVEs of FFMPEG →
CVE-2026-120247 FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows… 6.8 Medium CVE-2026-120246 FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder 6.8 Medium CVE-2026-120244 FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers… 6.8 Medium CVE-2026-120245 FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks… 6.8 Medium
Track this CVE