Back to overview

CVE-2026-65705

HIGH
7.8
CVSS 3.1
Description
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening.

Metadata

CVE ID
CVE-2026-65705
State
PUBLISHED
Assigner
VulnCheck
Reserved
2026-07-22 20:26 UTC
Published
2026-07-23 19:00 UTC
Last updated
2026-07-24 20:10 UTC
Primary CWE
CWE-787
Out-of-bounds Write
Vendor / Product
FFmpeg / FFmpeg
Sources
cve.org  ·  NVD

Severity & Metrics

7.8 HIGH CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
FFmpeg FFmpeg — 3.4 ≤ 8.1.2, f186c50cf53aec20e9a29059cb22ca3f2d59201c
Weakness (CWE)
CWESourceDescription
CWE-131 cna Incorrect Calculation of Buffer Size
CWE-787 cna Out-of-bounds Write
CVSS scores (2)
ScoreSeverityVersionSourceVector
7.8 HIGH 3.1 cna CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.3 HIGH 4.0 cna CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References (3)
Back to overview