FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. (CVE-2026-96611)
0
MediumVulnerabilityCVE-2026-96611gcveosvubuntu-cve-2026-96611cve-2026-96611ubuntu-pro-14-04-ltsubuntu-pro-16-04-ltsubuntu-pro-18-04-ltsubuntu-pro-20-04-ltsubuntu-pro-22-04-ltsubuntu-pro-24-04-ltsubuntu-26-10ubuntu-pro-26-04-lts
Published: 09/23/2026 (09/23/2026, 15:17:00 UTC)
Source: GCVE Database
Product: libav
Description
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks.
CVSS v3.1
Score 7.8high
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected software
libav
pkg:deb/ubuntu/libav?arch=source&distro=esm-infra-legacy/trustyAffected versions
=6:0.8.7-1ubuntu2=6:9.10-1ubuntu1=6:9.10-1ubuntu2=6:9.10-1ubuntu5=6:9.10-1ubuntu6=6:9.10-1ubuntu7=6:9.11-2ubuntu1=6:9.11-2ubuntu2=6:9.13-0ubuntu0.14.04.1=6:9.14-0ubuntu0.14.04.1=6:9.16-0ubuntu0.14.04.1=6:9.18-0ubuntu0.14.04.1=6:9.20-0ubuntu0.14.04.1=6:9.20-0ubuntu0.14.04.1+esm1
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps-legacy/xenialAffected versions
=7:2.7.2-1build1=7:2.8.1-1ubuntu1=7:2.8.2-1ubuntu1=7:2.8.3-1=7:2.8.4-1=7:2.8.4-1ubuntu1=7:2.8.4-1ubuntu2=7:2.8.4-1ubuntu3=7:2.8.4-1ubuntu4=7:2.8.6-1ubuntu1=7:2.8.6-1ubuntu2=7:2.8.8-0ubuntu0.16.04.1=7:2.8.10-0ubuntu0.16.04.1=7:2.8.11-0ubuntu0.16.04.1=7:2.8.14-0ubuntu0.16.04.1=7:2.8.15-0ubuntu0.16.04.1=7:2.8.15-0ubuntu0.16.04.1+esm1=7:2.8.17-0ubuntu0.1=7:2.8.17-0ubuntu0.1+esm1=7:2.8.17-0ubuntu0.1+esm2=7:2.8.17-0ubuntu0.1+esm3=7:2.8.17-0ubuntu0.1+esm4=7:2.8.17-0ubuntu0.1+esm5=7:2.8.17-0ubuntu0.1+esm6=7:2.8.17-0ubuntu0.1+esm7=7:2.8.17-0ubuntu0.1+esm8=7:2.8.17-0ubuntu0.1+esm9=7:2.8.17-0ubuntu0.1+esm10=7:2.8.17-0ubuntu0.1+esm11=7:2.8.17-0ubuntu0.1+esm12=7:2.8.17-0ubuntu0.1+esm13=7:2.8.17-0ubuntu0.1+esm14=7:2.8.17-0ubuntu0.1+esm15=7:2.8.17-0ubuntu0.1+esm16=7:2.8.17-0ubuntu0.1+esm17=7:2.8.17-0ubuntu0.1+esm18
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/bionicAffected versions
=7:3.3.4-2=7:3.3.4-2build3=7:3.4-2ubuntu2=7:3.4-4=7:3.4-4build1=7:3.4.1-1=7:3.4.1-1build1=7:3.4.2-1=7:3.4.2-1build1=7:3.4.2-2=7:3.4.4-0ubuntu0.18.04.1=7:3.4.6-0ubuntu0.18.04.1=7:3.4.8-0ubuntu0.2=7:3.4.11-0ubuntu0.1=7:3.4.11-0ubuntu0.1+esm1=7:3.4.11-0ubuntu0.1+esm2=7:3.4.11-0ubuntu0.1+esm3=7:3.4.11-0ubuntu0.1+esm4=7:3.4.11-0ubuntu0.1+esm5=7:3.4.11-0ubuntu0.1+esm6=7:3.4.11-0ubuntu0.1+esm7=7:3.4.11-0ubuntu0.1+esm8=7:3.4.11-0ubuntu0.1+esm9=7:3.4.11-0ubuntu0.1+esm10=7:3.4.11-0ubuntu0.1+esm11=7:3.4.11-0ubuntu0.1+esm12=7:3.4.11-0ubuntu0.1+esm13=7:3.4.11-0ubuntu0.1+esm14=7:3.4.11-0ubuntu0.1+esm15=7:3.4.11-0ubuntu0.1+esm16
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/focalAffected versions
=7:4.1.4-1build2=7:4.2.1-2=7:4.2.1-2ubuntu1=7:4.2.2-1build1=7:4.2.2-1ubuntu1=7:4.2.4-1ubuntu0.1=7:4.2.4-1ubuntu0.1+esm1=7:4.2.7-0ubuntu0.1=7:4.2.7-0ubuntu0.1+esm1=7:4.2.7-0ubuntu0.1+esm2=7:4.2.7-0ubuntu0.1+esm3=7:4.2.7-0ubuntu0.1+esm4=7:4.2.7-0ubuntu0.1+esm5=7:4.2.7-0ubuntu0.1+esm6=7:4.2.7-0ubuntu0.1+esm7=7:4.2.7-0ubuntu0.1+esm8=7:4.2.7-0ubuntu0.1+esm9=7:4.2.7-0ubuntu0.1+esm10=7:4.2.7-0ubuntu0.1+esm11=7:4.2.7-0ubuntu0.1+esm12=7:4.2.7-0ubuntu0.1+esm13=7:4.2.7-0ubuntu0.1+esm14=7:4.2.7-0ubuntu0.1+esm15=7:4.2.7-0ubuntu0.1+esm16=7:4.2.7-0ubuntu0.1+esm17=7:4.2.7-0ubuntu0.1+esm18
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/jammyAffected versions
=7:4.4-6ubuntu5=7:4.4.1-2ubuntu1=7:4.4.1-3ubuntu1=7:4.4.1-3ubuntu2=7:4.4.1-3ubuntu3=7:4.4.1-3ubuntu5=7:4.4.2-0ubuntu0.22.04.1=7:4.4.2-0ubuntu0.22.04.1+esm1=7:4.4.2-0ubuntu0.22.04.1+esm2=7:4.4.2-0ubuntu0.22.04.1+esm3=7:4.4.2-0ubuntu0.22.04.1+esm4=7:4.4.2-0ubuntu0.22.04.1+esm5=7:4.4.2-0ubuntu0.22.04.1+esm6=7:4.4.2-0ubuntu0.22.04.1+esm7=7:4.4.2-0ubuntu0.22.04.1+esm8=7:4.4.2-0ubuntu0.22.04.1+esm9=7:4.4.2-0ubuntu0.22.04.1+esm10=7:4.4.2-0ubuntu0.22.04.1+esm11=7:4.4.2-0ubuntu0.22.04.1+esm12=7:4.4.2-0ubuntu0.22.04.1+esm13=7:4.4.2-0ubuntu0.22.04.1+esm14=7:4.4.2-0ubuntu0.22.04.1+esm15=7:4.4.2-0ubuntu0.22.04.1+esm16=7:4.4.2-0ubuntu0.22.04.1+esm17
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/nobleAffected versions
=7:6.0-6ubuntu1=7:6.0-9ubuntu1=7:6.1-2ubuntu1=7:6.1-3ubuntu1=7:6.1-4ubuntu1=7:6.1-5ubuntu1=7:6.1.1-1ubuntu1=7:6.1.1-3ubuntu1=7:6.1.1-3ubuntu5=7:6.1.1-3ubuntu5+esm1=7:6.1.1-3ubuntu5+esm2=7:6.1.1-3ubuntu5+esm3=7:6.1.1-3ubuntu5+esm4=7:6.1.1-3ubuntu5+esm5=7:6.1.1-3ubuntu5+esm6=7:6.1.1-3ubuntu5+esm7=7:6.1.1-3ubuntu5+esm8=7:6.1.1-3ubuntu5+esm10=7:6.1.1-3ubuntu5+esm11=7:6.1.1-3ubuntu5+esm12=7:6.1.1-3ubuntu5+esm13=7:6.1.1-3ubuntu5+esm15
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=stonkingAffected versions
=7:8.0.1-3ubuntu2=7:8.1-3ubuntu3=7:8.1.2-2ubuntu2
ffmpeg
pkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/resoluteAffected versions
=7:7.1.1-1ubuntu4=7:7.1.2-1ubuntu3=7:7.1.2-1ubuntu4=7:7.1.3-1ubuntu1=7:8.0.1-2ubuntu1=7:8.0.1-3ubuntu1=7:8.0.1-3ubuntu2=7:8.0.1-3ubuntu2+esm1=7:8.0.1-3ubuntu2+esm3=7:8.0.1-3ubuntu2+esm4=7:8.0.1-3ubuntu2+esm5
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-96611
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:14.04:LTS","Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:26.10","Ubuntu:Pro:26.04:LTS"]
- Cvss Version
- 3.1
Threat ID: 6ad3f5102cdf04f656657c28
Added to database: 10/17/2026, 22:22:08 UTC
Last updated: 10/17/2026, 22:57:57 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Sort by
Loading community insights…
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Please log in to the Console to use AI analysis features.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Breach by OffSeqOFFSEQFRIENDS — 25% OFF
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
OffSeq TrainingCredly Certified
Lead Pen Test Professional
Technical5-day eLearningPECB Accredited