Libav: FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap… (CVE-2026-65703)
Description
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder. This vulnerability allows remote attackers to cause heap corruption by supplying a crafted AVI file that manipulates frame dimensions across TDSF frames. The issue arises because the tdsc_parse_tdsf() function does not properly unreference an existing reference frame before allocating a new buffer, leading to writes beyond the allocated buffer size. This can result in a process crash and potentially remote code execution. A patch is available to address this vulnerability.
CVSS v3.1
Score 7.8high
Affected software
pkg:deb/ubuntu/libav?arch=source&distro=esm-infra-legacy/trustypkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps-legacy/xenialpkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/ffmpeg?arch=source&distro=stonkingpkg:deb/ubuntu/ffmpeg?arch=source&distro=esm-apps/resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in FFmpeg versions 2.7 through 8.1.2 is an out-of-bounds write in the TDSC video decoder. Specifically, the tdsc_parse_tdsf() function fails to unreference an existing reference frame before allocating a new buffer, causing heap corruption when processing crafted AVI files that manipulate frame dimensions across TDSF frames. This flaw can lead to a crash or potentially allow remote code execution by a remote attacker supplying malicious media files.
Potential Impact
Remote attackers can exploit this vulnerability by providing specially crafted AVI files to trigger heap corruption, which may cause the affected process to crash or potentially allow remote code execution. The impact includes denial of service and possible full system compromise depending on the execution context.
Mitigation Recommendations
A patch is available for this vulnerability. Users should apply the official fixes provided by the FFmpeg project or their distribution vendors to remediate the issue. No additional mitigation steps are required beyond applying the patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x3xw-4qcq-c6mr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-65703"]
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a629b0d9c2644c7f8d861dd
Added to database: 07/23/2026, 22:51:57 UTC
Last enriched: 10/18/2026, 03:32:41 UTC
Last updated: 10/22/2026, 01:15:25 UTC
Views: 105
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.