Threats Tagged 'cve-2026-18393'

CVE-2026-18393 is a medium severity vulnerability in FFmpeg's tdsc_load_cursor() function used in Red Hat Enterprise Linux AI 3 and related products. The flaw causes an out-of-bounds write on a heap buffer when processing crafted TDSC cursor data, potentially leading to denial of service or arbitrary code execution. The vulnerable code is in libavcodec (tdsc.c) and has been present since the codec's inclusion in 2015. Red Hat does not ship FFmpeg in base RHEL but includes it in EPEL, RHEL AI, and OpenShift AI container images. No patch is currently available, and users are advised to avoid opening untrusted TDSC-encoded video content until a fix is released.

CVE-2026-18393 is a medium severity vulnerability in FFmpeg's tdsc_load_cursor() function, which causes an out-of-bounds write on a heap-allocated buffer when processing crafted TDSC cursor data. This flaw exists in FFmpeg builds shipped with Red Hat Enterprise Linux AI 3 and related products. Exploitation requires a user to open a specially crafted video file, potentially leading to denial of service or arbitrary code execution. No official fix or patch has been confirmed yet. Users are advised to avoid opening untrusted TDSC-encoded video content until a patched version is available.