6.5
Moyenne
CVE-2026-6385 A flaw was found in FFmpeg
Description
A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Lightspeed Core | Versions non publiées | |
| Red Hat AI Inference Server | Versions non publiées | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2458764 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Lightspeed Core
Les 19 CVE de Lightspeed Core →
CVE-2026-34993
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
6.4
Moyenne
CVE-2026-8643
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…
4.1
Moyenne
CVE-2026-42208
BerriAI LiteLLM SQL Injection Vulnerability
9.3
Critique
CVE-2026-40192
Pillow is a Python imaging library
8.7
Élevée