High severity7.8NVD Advisory· Published Aug 19, 2026· Updated Sep 9, 2026
CVE-2026-75142
CVE-2026-75142
Description
FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords5 versionspkg:rpm/opensuse/ffmpeg-4&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ffmpeg-9&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ffmpeg-7&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ffmpeg-8&distro=openSUSE%20Tumbleweed
< 4.4.8-5.1+ 4 more
- (no CPE)range: < 4.4.8-5.1
- (no CPE)range: < 9.0.1-3.1
- (no CPE)range: < 7.1.5-2.1
- (no CPE)range: < 7.1.5-160000.1.1
- (no CPE)range: < 8.1.2-3.1
Patches
Vulnerability mechanics
References
3News mentions
1- FFmpeg: Seven Vulnerabilities Including Critical Heap Overflow Disclosed TogetherVypr Intelligence · Aug 19, 2026