Skip to content
OpenAdvisories
High · 8.8 CVE-2026-64835 EUVD-2026-47760GHSA-p2v8-4c4f-rwpq

FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder

Published Jul 22, 2026 · Updated Jul 28, 2026 · Assigned by VulnCheck

Vendor: FFmpeg Product: FFmpeg Package: ffmpeg Package: ffmpeg Package: ffmpeg-7 Package: ffmpeg-7.1 Package: ffmpeg-8.0 Package: ffmpeg-8.1 Package: libav Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.

Affected products

VendorProductAffectedFixed
FFmpeg FFmpeg 4.4 – ≤ 8.1.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 ffmpeg 7:9.0.2-1 —
Debian 13 ffmpeg No fix yet —
Debian 12 ffmpeg No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 ffmpeg No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS ffmpeg 7:8.0.1-3ubuntu2+esm4 USN-8716-2
Ubuntu Pro 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm13 USN-8716-1
Ubuntu Pro 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm15 USN-8716-1
Ubuntu Pro 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm16 USN-8716-1
Ubuntu Pro 18.04 LTS ffmpeg 7:3.4.11-0ubuntu0.1+esm15 USN-8716-1
Ubuntu Pro 16.04 LTS ffmpeg 7:2.8.17-0ubuntu0.1+esm17 USN-8716-1
Ubuntu Pro 14.04 LTS libav No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Enterprise Linux Ai 3 ffmpeg +18 6.1.6-3.el9ai RHSA-2026:74089, RHSA-2026:52833, RHSA-2026:52832

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 ffmpeg-4 4.4.8-150600.13.52.1 SUSE-SU-2026:3542-1
SLES 15 SP4 ffmpeg-4 4.4.8-150400.3.72.1 SUSE-SU-2026:3529-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 ffmpeg-7 7.1.4-160000.3.1 SUSE-SU-2026:23232-1, SUSE-SU-2026:23222-1
SLES for SAP 15 SP4 ffmpeg-4 4.4.8-150400.3.72.1 SUSE-SU-2026:3529-1
SLES 16.0 ffmpeg-7 7.1.4-160000.3.1 SUSE-SU-2026:23232-1, SUSE-SU-2026:23222-1
SLE HPC 15 SP4 ffmpeg-4 4.4.8-150400.3.72.1 SUSE-SU-2026:3529-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed ffmpeg-4 4.4.8-3.1 openSUSE-SU-2026:11448-1
openSUSE Tumbleweed ffmpeg-7 7.1.5-2.1 openSUSE-SU-2026:11665-1
openSUSE Leap 16.0 ffmpeg-4 4.4.7-bp160.3.1 openSUSE-SU-2026:21522-1
openSUSE Leap 16.0 ffmpeg-7 7.1.4-160000.3.1 openSUSE-SU-2026:21572-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling ffmpeg-7 +2 No fix yet —
Wolfi rolling ffmpeg-8.1 8.1.3-r0 —

Advisories 15

References