IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.6Hoch

CVE-2026-58049FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

FFmpeg FFmpeg; Red Hat Red Hat Enterprise Linux AI 3.0 for RHEL 9; Red Hat Red Hat Enterprise Linux AI 3.2 for RHEL 9; Red Hat Red Hat Enterprise Linux AI 3.3 … Veröffentlicht: (vor 4 Monaten)

Beschreibung

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.

Schwachstellentyp (CWE): CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
enterprise linux ai 3.0 —
enterprise linux ai 3.2 —
enterprise linux ai 3.3 —
enterprise linux ai 3.5 —
FFmpeg FFmpeg all versions
openshift ai 3.4 —
Red Hat Red Hat AI Inference Server all versions
Red Hat Red Hat Enterprise Linux AI 3.0 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI 3.2 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI 3.5 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 all versions
Red Hat Red Hat OpenShift AI 3.4 all versions
Red Hat Red Hat OpenShift AI (RHOAI) all versions

Referenzen und Patches

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

7.3Hoch
CVE-2026-91151

Cockpit: cockpit: local privilege escalation via insecure symlink handling in public key addition helper

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it ca…

7.8Hoch
CVE-2026-108472

Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs_admin

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in…

7.5Hoch
CVE-2026-91150

Cockpit: cockpit: denial of service via unbounded fragmented websocket messages

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a…