CVE-2026-107695

Mô tả

Tham khảo

• code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618 · Issue Tracking
• gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0 · Exploit
• FFmpeg/FFmpeg · Product
• FFmpeg/FFmpeg · Product
• FFmpeg/FFmpeg commit 0e6eef3 · Patch
• FFmpeg/FFmpeg commit a4ddaba · Patch
• FFmpeg/FFmpeg commit c364ab1 · Patch
• vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist · Patch

Lỗ hổng khác của ffmpeg

• CVE-2026-107698TRUNG BÌNH 5.4FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c t…
• CVE-2026-107697TRUNG BÌNH 4.3FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensio…
• CVE-2026-107696TRUNG BÌNH 6.5FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects with…
• CVE-2026-107678TRUNG BÌNH 4.7FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recur…
• CVE-2026-107677TRUNG BÌNH 4.7FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by sup…