← All advisories

Low severity2.9NVD Advisory· Published Sep 13, 2026· Updated Oct 14, 2026

CVE-2026-52296

CVE-2026-52296

Description

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

FFmpeg/Ffmpegllm-fuzzy2 versions
<9.0+ 1 more
- (no CPE)range: <9.0
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: <9.0

Patches

Vulnerability mechanics

References

3

code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988nvdIssue TrackingPatch
git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47nvdPatch
github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPaddingnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.