CVE-2026-107698

概要

参考情報

• code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292 · Issue Tracking
• FFmpeg/FFmpeg · Product
• FFmpeg/FFmpeg · Product
• FFmpeg/FFmpeg commit 2326bc5 · Patch
• FFmpeg/FFmpeg commit 7c01199 · Patch
• FFmpeg/FFmpeg commit ea9e85e · Patch
• FFmpeg/FFmpeg commit f9aa872 · Patch
• vulncheck.com/advisories/ffmpeg-before-7.1.4-and-8.0.2-ssrf-via-rtsp-redirect-handling · Patch

ffmpeg のその他の脆弱性

• CVE-2026-107697中 4.3FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensio…
• CVE-2026-107696中 6.5FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects with…
• CVE-2026-107695中 6.5FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service becau…
• CVE-2026-107678中 4.7FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recur…
• CVE-2026-107677中 4.7FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by sup…