Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

FFmpeg

libav

ffmpeg

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder. This vulnerability allows remote attackers to cause heap corruption by supplying a crafted AVI file that manipulates frame dimensions across TDSF frames. The issue arises because the tdsc_parse_tdsf() function does not properly unreference an existing reference frame before allocating a new buffer, leading to writes beyond the allocated buffer size. This can result in a process crash and potentially remote code execution. A patch is available to address this vulnerability.

The vulnerability in FFmpeg versions 2.7 through 8.1.2 is an out-of-bounds write in the TDSC video decoder. Specifically, the tdsc_parse_tdsf() function fails to unreference an existing reference frame before allocating a new buffer, causing heap corruption when processing crafted AVI files that manipulate frame dimensions across TDSF frames. This flaw can lead to a crash or potentially allow remote code execution by a remote attacker supplying malicious media files.

Detailed information about FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap… (CVE-2026-65703) - Live Threat Intelligence - Threat Radar | OffSeq.com

Libav: FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap… (CVE-2026-65703)

CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or
denial of service via crafted ADX/AAX audio files
CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream

CVE-2026-64835 and CVE-2026-58049 are vulnerabilities in FFmpeg used within Red Hat Enterprise Linux AI. CVE-2026-64835 can lead to arbitrary code execution, information disclosure, or denial of service triggered by specially crafted ADX/AAX audio files. CVE-2026-58049 causes memory corruption when processing crafted RASC video streams. Red Hat has issued security advisories (RHSA-2026:51180 and RHSA-2026:43711) that backport upstream fixes into the ffmpeg-6.1.6-3.el9ai package. These fixes address the vulnerabilities in multiple architectures (x86_64, s390x, ppc64le, aarch64) and versions of Red Hat Enterprise Linux AI (3.0, 3.2, 3.3, 3.5). The vendor advisory explicitly states that updated packages are available and should be applied to remediate these issues. No active exploitation has been reported.

Detailed information about Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049 affecting Red Hat Product Security Red Hat. Get real-

Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:51180

https://access.redhat.com/security/updates/classification/#important

Canonical URL

https://access.redhat.com/errata/RHSA-2026:52832

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-58049 page

SUSE CVE CVE-2026-64833 page

SUSE CVE CVE-2026-64834 page

SUSE CVE CVE-2026-65703 page

SUSE CVE CVE-2026-65704 page

SUSE CVE CVE-2026-65705 page

SUSE CVE CVE-2026-65706 page

SUSE CVE CVE-2026-66036 page

SUSE CVE CVE-2026-66037 page

SUSE CVE CVE-2026-70628 page

SUSE CVE CVE-2026-70629 page

SUSE CVE CVE-2026-70630 page

SUSE CVE CVE-2026-70631 page

SUSE CVE CVE-2026-70632 page

SUSE CVE CVE-2026-75141 page

SUSE CVE CVE-2026-75142 page

SUSE CVE CVE-2026-75143 page

SUSE CVE CVE-2026-75144 page

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)


Libav: FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap… (CVE-2026-65703)CVE-2026-65703 0 FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder. This vulnerability allows remote attackers to cause heap corruption by supplying a crafted AVI file that manipulates frame dimensions across TDSF frames. The issue arises because the tdsc_parse_tdsf() function does not properly unreference an existing reference frame before allocating a new buffer, leading to writes beyond the allocated buffer size. This can result in a process crash and potentially remote code execution. A patch is available to address this vulnerability. MediumVulnerability#gcve #osv #ghsa-x3xw-4qcq-c6mr Join the discussion	GCVE Database	07/23/2026, 20:17:00 UTC Added: 07/23/2026, 22:51:57 UTC
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)CVE-2026-58049 0 CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream MediumVulnerability#gcve #csaf #cve-2026-58049 Join the discussion	GCVE Database	06/28/2026, 02:16:00 UTC Added: 08/07/2026, 05:56:40 UTC

Threats Tagged 'cve-2026-65703'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-65703'

Lead Pen Test Professional