Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Fixed packages 30

Vulnerabilities 3

• High 8.8
  CVE-2026-66036

  FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter

  FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph…

  FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  Jul 24, 2026
• High 8.8
  CVE-2026-66039

  FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File

  FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craf…

  FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  Jul 24, 2026
• High 7.5
  CVE-2026-64834

  FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer

  FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fail…

  FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  Jul 22, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://issues.redhat.com/browse/AIPCC-29864
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60335.json
• report
  https://access.redhat.com/security/cve/CVE-2026-64834
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2506191
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-64834
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-64834
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663
• article
  https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
• report
  https://access.redhat.com/security/cve/CVE-2026-66036
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2506909
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-66036
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-66036
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783
• article
  https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
• report
  https://access.redhat.com/security/cve/CVE-2026-66039
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2506937
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-66039
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-66039
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718
• article
  https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631
• article
  https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file