6.5
Medium
CVE-2026-6385 A flaw was found in FFmpeg
Description
A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lightspeed Core | Versions not published | |
| Red Hat AI Inference Server | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2458764 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Lightspeed Core
The 19 CVEs of Lightspeed Core →
CVE-2026-34993
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
6.4
Medium
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…
4.1
Medium
CVE-2026-42208
BerriAI LiteLLM SQL Injection Vulnerability
9.3
Critical
CVE-2026-40192
Pillow is a Python imaging library
8.7
High