CVE-2026-52295: n/a

CVE-2026-52295 is a buffer overflow vulnerability affecting Ffmpeg versions 7.0 and later. The issue resides in the libavformat/iamf_writer.c component and can be triggered to cause a denial of service condition. The vulnerability is classified under CWE-120 (Classic Buffer Overflow). The CVSS v3.1 base score is 6.2, with attack vector local, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. No vendor advisory or patch information is currently available.

Successful exploitation results in denial of service by crashing or destabilizing the affected Ffmpeg component. There is no reported impact on confidentiality or integrity. The attack requires local access and has low complexity, but no privileges or user interaction are needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted input with the affected Ffmpeg versions and consider applying workarounds if provided by the vendor.