Summary
Momoko Shiraishi discovered that FFmpeg did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
(CVE-2026-30754)
It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-38344)
It was discovered that FFmpeg did not correctly handle certain arithmetic
operations. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-38346, CVE-2026-38348, CVE-2026-38349)
It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38347)
It was discovered that FFmpeg did not correctly handle certain arithmetic
operations. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38350)
Joshua Rogers discovered that FFmpeg did not correctly handle certain
memory operations. An attacker could possibly use this issue to leak
sensitive information. This issue only affected Ubuntu 26.04 LTS.
(CVE-2026-75147)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ffmpeg | 7:2.8.17-0ubuntu0.1+esm18 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ffmpeg | 7:3.4.11-0ubuntu0.1+esm16 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ffmpeg | 7:4.2.7-0ubuntu0.1+esm18 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ffmpeg | 7:4.4.2-0ubuntu0.22.04.1+esm17 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | ffmpeg | 7:6.1.1-3ubuntu5+esm15 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | ffmpeg | 7:8.0.1-3ubuntu2+esm5 |
Vulnerabilities 8
-
High 8.8
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in li…
-
High 7.5
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 all…
-
High 7.5
An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attack…
-
High 7.5
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 all…
-
High 7.5
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Deni…
-
High 7.5
An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attack…
-
High 7.5
An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows att…
-
High 7.1
FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c
FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer (libavformat/rtpenc_av1.c). The keyframe detection loop that searches for a sequence header OBU advanced its pointer and remaining-size counter by the encoded header length …
References
-
report
https://ubuntu.com/security/CVE-2026-30754
-
report
https://ubuntu.com/security/CVE-2026-38344
-
report
https://ubuntu.com/security/CVE-2026-38346
-
report
https://ubuntu.com/security/CVE-2026-38347
-
report
https://ubuntu.com/security/CVE-2026-38348
-
report
https://ubuntu.com/security/CVE-2026-38349
-
report
https://ubuntu.com/security/CVE-2026-38350
-
report
https://ubuntu.com/security/CVE-2026-75147