CVE-2026-40962

Summary

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Affected Software

Weaknesses

• CWE-190: CWE-190 Integer Overflow or Wraparound

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22348

• ←Previous
• Next→