5.3
Medium
CVE-2026-90816 A vulnerability was found in FFmpeg 8.0.x
Description
A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended.
Affected products and versions
References
- VDB-403318 | FFmpeg Duration hlsproto.c parse_playlist denial of service vuldb.com
- VDB-403318 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-90816 | CVE Analysis and Report vuldb.com
- Submit #922626 | FFmpeg FFmpeg ≤ 8.0.x Denial of Service vuldb.com
- code.ffmpeg.org code.ffmpeg.org
- code.ffmpeg.org code.ffmpeg.org
- ffmpeg.org ffmpeg.org
Timeline
- Published
- Last modified
Other CVEs of ffmpeg
The 11 CVEs of ffmpeg →
CVE-2026-90815
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1
5.3
Medium
CVE-2025-1816
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb
5.3
Medium
CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
5.3
Medium
CVE-2025-1373
A vulnerability was found in FFmpeg up to 7.1
4.8
Medium