5.3
Moyenne
CVE-2026-90816 A vulnerability was found in FFmpeg 8.0.x
Description
A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended.
Produits et versions touchés
Références
- VDB-403318 | FFmpeg Duration hlsproto.c parse_playlist denial of service vuldb.com
- VDB-403318 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-90816 | CVE Analysis and Report vuldb.com
- Submit #922626 | FFmpeg FFmpeg ≤ 8.0.x Denial of Service vuldb.com
- code.ffmpeg.org code.ffmpeg.org
- code.ffmpeg.org code.ffmpeg.org
- ffmpeg.org ffmpeg.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de ffmpeg
Les 11 CVE de ffmpeg →
CVE-2026-90815
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1
5.3
Moyenne
CVE-2025-1816
A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb
5.3
Moyenne
CVE-2025-1594
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
5.3
Moyenne
CVE-2025-1373
A vulnerability was found in FFmpeg up to 7.1
4.8
Moyenne