High severity7.8NVD Advisory· Published Aug 19, 2026· Updated Aug 31, 2026
CVE-2026-75141
CVE-2026-75141
Description
FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords4 versionspkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ffmpeg-8&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ffmpeg-9&distro=openSUSE%20Tumbleweed
< 7.1.5-160000.1.1+ 3 more
- (no CPE)range: < 7.1.5-160000.1.1
- (no CPE)range: < 7.1.5-2.1
- (no CPE)range: < 8.1.2-3.1
- (no CPE)range: < 9.0.1-3.1
Patches
Vulnerability mechanics
References
3News mentions
1- FFmpeg: Seven Vulnerabilities Including Critical Heap Overflow Disclosed TogetherVypr Intelligence · Aug 19, 2026