Medium severity4.3NVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026

CVE-2026-90816

Description

A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpegllm-fuzzy
Range: <8.1, <9.0

Patches

Vulnerability mechanics

References

code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4nvd
code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492nvd
ffmpeg.orgnvd
vuldb.com/cve/CVE-2026-90816nvd
vuldb.com/submit/922626nvd
vuldb.com/vuln/403318nvd
vuldb.com/vuln/403318/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000