CVE-2026-40962
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
Published: 2026-04-16 · CVSS: 4.9 · CVSS 3.1
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7