Skip to content
OpenAdvisories
High RHSA-2026:67303 1 CVE

Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Published Sep 15, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg-debugsource 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 ffmpeg-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavcodec-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavcodec-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavcodec-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavdevice-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavdevice-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavdevice-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavfilter-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavfilter-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavfilter-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavformat-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavformat-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavformat-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavutil-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavutil-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libavutil-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libpostproc-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libpostproc-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libpostproc-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswresample-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswresample-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswresample-free-rhai-devel 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswscale-free-rhai 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswscale-free-rhai-debuginfo 0:6.1.6-9.el9ai
Red Hat · Enterprise Linux Ai 3 enterprise_linux_ai:3.5::el9 libswscale-free-rhai-devel 0:6.1.6-9.el9ai

Vulnerabilities 1

  • High 8.8
    CVE-2026-64830

    FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

    FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the f…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://issues.redhat.com/browse/AIPCC-31616
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67303.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-64830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2506193
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-64830
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-64830
  • article
    https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951
  • article
    https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657
  • article
    https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer