CVE-2026-18393

Summary

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus

Weaknesses

  • CWE-787: Out-of-bounds Write

Workarounds

Avoid opening untrusted TDSC-encoded video content with vulnerable FFmpeg consumers until a patched version is available.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References