Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

FFmpeg

libav

ffmpeg

FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter. This vulnerability occurs when processing crafted NV12 video frames with odd width dimensions, leading to heap memory corruption. The flaw can cause process crashes or potentially allow code execution. A patch is available to address this issue.

An out-of-bounds write vulnerability exists in the vf_swaprect video filter of FFmpeg versions 3.0 through 8.1.2. The vulnerability is triggered by processing specially crafted NV12 video frames that have odd width dimensions, resulting in heap memory corruption. This memory corruption can lead to application crashes or potentially enable arbitrary code execution. The vulnerability is tracked as CVE-2026-65706 and has a CVSS v3.1 score of 7.8, indicating a high impact on confidentiality, integrity, and availability. A patch is available to fix this vulnerability.

Detailed information about FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers 

FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap… (CVE-2026-65706) - Live Threat Intelligence - Threat Radar | OffSeq.com

Libav: FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap… (CVE-2026-65706)

CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or
denial of service via crafted ADX/AAX audio files
CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream

CVE-2026-64835 and CVE-2026-58049 are vulnerabilities in FFmpeg used within Red Hat Enterprise Linux AI. CVE-2026-64835 can lead to arbitrary code execution, information disclosure, or denial of service triggered by specially crafted ADX/AAX audio files. CVE-2026-58049 causes memory corruption when processing crafted RASC video streams. Red Hat has issued security advisories (RHSA-2026:51180 and RHSA-2026:43711) that backport upstream fixes into the ffmpeg-6.1.6-3.el9ai package. These fixes address the vulnerabilities in multiple architectures (x86_64, s390x, ppc64le, aarch64) and versions of Red Hat Enterprise Linux AI (3.0, 3.2, 3.3, 3.5). The vendor advisory explicitly states that updated packages are available and should be applied to remediate these issues. No active exploitation has been reported.

Detailed information about Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049 affecting Red Hat Product Security Red Hat. Get real-

Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:51180

https://access.redhat.com/security/updates/classification/#important

Canonical URL

https://access.redhat.com/errata/RHSA-2026:52832

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-58049 page

SUSE CVE CVE-2026-64833 page

SUSE CVE CVE-2026-64834 page

SUSE CVE CVE-2026-65703 page

SUSE CVE CVE-2026-65704 page

SUSE CVE CVE-2026-65705 page

SUSE CVE CVE-2026-65706 page

SUSE CVE CVE-2026-66036 page

SUSE CVE CVE-2026-66037 page

SUSE CVE CVE-2026-70628 page

SUSE CVE CVE-2026-70629 page

SUSE CVE CVE-2026-70630 page

SUSE CVE CVE-2026-70631 page

SUSE CVE CVE-2026-70632 page

SUSE CVE CVE-2026-75141 page

SUSE CVE CVE-2026-75142 page

SUSE CVE CVE-2026-75143 page

SUSE CVE CVE-2026-75144 page

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)


Libav: FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap… (CVE-2026-65706)CVE-2026-65706 0 FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter. This vulnerability occurs when processing crafted NV12 video frames with odd width dimensions, leading to heap memory corruption. The flaw can cause process crashes or potentially allow code execution. A patch is available to address this issue. MediumVulnerability#gcve #osv #ghsa-g9rh-4g64-7qxg Join the discussion	GCVE Database	07/23/2026, 20:17:00 UTC Added: 07/23/2026, 22:51:58 UTC
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary… (CVE-2026-58049)CVE-2026-58049 0 CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream MediumVulnerability#gcve #csaf #cve-2026-58049 Join the discussion	GCVE Database	06/28/2026, 02:16:00 UTC Added: 08/07/2026, 05:56:40 UTC

Threats Tagged 'cve-2026-65706'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-65706'

Lead Pen Test Professional