← All advisories

High severity7.5NVD Advisory· Published Apr 13, 2026· Updated Apr 23, 2026

CVE-2026-30999

CVE-2026-30999

Description

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

FFmpeg/Ffmpeg2 versions
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <=8.0.1
- (no CPE)range: = v8.0.1
osv-coords2 versions
pkg:apk/chainguard/ffmpeg-8.0 pkg:apk/wolfi/ffmpeg-8.0
< 8.0.2-r0+ 1 more
- (no CPE)range: < 8.0.2-r0
- (no CPE)range: < 8.0.2-r0

Patches

Vulnerability mechanics

References

4

excellent-oatmeal-319.notion.site/CVE-2026-30999-Memory-Leak-e0d88ac53e2e42c1b5ef9aa3497e27b6nvdExploitThird Party Advisory
ffmpeg.org/doxygen/7.0/zmqsend_8c_source.htmlnvdProduct
github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.cnvdProduct
www.ffmpeg.org/download.htmlnvdProduct

News mentions

0

No linked articles in our index yet.