Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before…

Description

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.

Produits et versions touchés

Produit Versions touchées Corrigé en
FFMPEG Versions non publiées
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions non publiées
Red Hat OpenShift AI (RHOAI) Versions non publiées
Red Hat AI Inference Server Versions non publiées
Red Hat Enterprise Linux AI 3.5 for RHEL 9 Versions non publiées
Red Hat Enterprise Linux AI 3.3 for RHEL 9 Versions non publiées
Red Hat Enterprise Linux AI 3.0 for RHEL 9 Versions non publiées
Red Hat Enterprise Linux AI 3.2 for RHEL 9 Versions non publiées
Red Hat OpenShift AI 3.4 1787076481 premières → < 1787076481 1787076481

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de FFMPEG

Les 83 CVE de FFMPEG →
CVE-2026-120247 FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows… 6.8 Moyenne CVE-2026-120246 FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder 6.8 Moyenne CVE-2026-120244 FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers… 6.8 Moyenne CVE-2026-120245 FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks… 6.8 Moyenne
Suivre cette CVE