FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)
CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream
AI Analysis
Technical Summary
CVE-2026-64835 is a vulnerability in FFmpeg that permits arbitrary code execution, information disclosure, or denial of service when processing specially crafted ADX/AAX audio files. CVE-2026-58049 is a memory corruption vulnerability triggered by crafted RASC video streams. Both vulnerabilities are present in FFmpeg versions used in Red Hat Enterprise Linux AI 3.3. Red Hat Product Security has backported fixes from upstream FFmpeg version 6.1.6-3.el9ai and released updated packages to remediate these issues. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits in the wild have been reported.
Potential Impact
Successful exploitation of CVE-2026-64835 could allow attackers to execute arbitrary code, disclose sensitive information, or cause denial of service via crafted audio files. CVE-2026-58049 could lead to memory corruption through crafted video streams, potentially causing crashes or other unintended behavior. These vulnerabilities affect the FFmpeg multimedia framework used in Red Hat Enterprise Linux AI 3.3, impacting systems that process untrusted media files. No active exploitation has been observed.
Mitigation Recommendations
Red Hat has provided backported fixes for these vulnerabilities in the ffmpeg-6.1.6-3.el9ai package for Red Hat Enterprise Linux AI 3.3 across supported architectures. Users should update to the fixed package versions as provided by Red Hat to remediate these issues. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official updates.
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)
Description
CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream
CVSS v3.1
Score 8.6high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-64835 is a vulnerability in FFmpeg that permits arbitrary code execution, information disclosure, or denial of service when processing specially crafted ADX/AAX audio files. CVE-2026-58049 is a memory corruption vulnerability triggered by crafted RASC video streams. Both vulnerabilities are present in FFmpeg versions used in Red Hat Enterprise Linux AI 3.3. Red Hat Product Security has backported fixes from upstream FFmpeg version 6.1.6-3.el9ai and released updated packages to remediate these issues. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits in the wild have been reported.
Potential Impact
Successful exploitation of CVE-2026-64835 could allow attackers to execute arbitrary code, disclose sensitive information, or cause denial of service via crafted audio files. CVE-2026-58049 could lead to memory corruption through crafted video streams, potentially causing crashes or other unintended behavior. These vulnerabilities affect the FFmpeg multimedia framework used in Red Hat Enterprise Linux AI 3.3, impacting systems that process untrusted media files. No active exploitation has been observed.
Mitigation Recommendations
Red Hat has provided backported fixes for these vulnerabilities in the ffmpeg-6.1.6-3.el9ai package for Red Hat Enterprise Linux AI 3.3 across supported architectures. Users should update to the fixed package versions as provided by Red Hat to remediate these issues. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:51180
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-64835"]
- Cvss Version
- null
Threat ID: 6a757398bf8831d539d91469
Added to database: 08/07/2026, 05:56:40 UTC
Last enriched: 08/07/2026, 07:56:15 UTC
Last updated: 08/08/2026, 00:41:14 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.