Threats Tagged 'cve-2026-66036'

Red Hat has issued a security advisory addressing vulnerabilities in the ffmpeg component used within the Red Hat Enterprise Linux AI 3.5 platform. The advisory fixes CVE-2026-8461 and others related to out-of-bounds reads and writes. These vulnerabilities affect internal RPM packages supported only as part of the Red Hat AI application platform. Updated ffmpeg packages are provided to remediate these issues.

FFmpeg versions through 8.1.2 contain a heap out-of-bounds write vulnerability in the vf_hqdn3d filter. This flaw occurs when a crafted video input has increasing frame resolution between frames while filtergraph reinitialization is disabled (-reinit_filter 0). The vulnerability allows heap memory corruption due to undersized buffer allocation for line-history, leading to out-of-bounds writes during denoising operations.

Red Hat has issued a security advisory addressing multiple vulnerabilities, including CVE-2026-64834, in the ffmpeg component used in Red Hat Enterprise Linux AI 3.4 and 3.6. These vulnerabilities are rated with high severity and affect RPM packages that are internal build artifacts supported only as part of the Red Hat AI application platform. The advisory provides updated packages to remediate these issues.

CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-58049 FFmpeg: Memory corruption via crafted RASC video stream