Description
FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.
Published: 2026-09-01
Score: 2.9 Low
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Upgrade
AI Analysis

Impact

FFmpeg versions earlier than 9.0 contain an out‑of‑bounds read in the IAMF writer component. When the library copies extradata, it omits required padding; subsequent GetBitContext access reads beyond the buffer, which can corrupt memory and terminate the process. A crafted media file that triggers the over‑read may therefore cause a denial of service, but there is no evidence of code execution or data hiding.

Affected Systems

FFmpeg versions before 9.0 are affected because the flaw resides in the libavformat IAMF writer component. Any application that processes IAMF streams with untrusted data may trigger the issue and crash.

Risk and Exploitability

The EPSS score remains under 1% and the vulnerability is not in the CISA KEV catalog, indicating a low exploitation likelihood. The CVSS score of 2.9 classifies the issue as low, where an attacker supplies a crafted IAMF file that triggers the out‑of‑bounds read, causing a crash and denial of service.

Generated by OpenCVE AI on September 21, 2026 at 05:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update FFmpeg to a patched version that fixes the libavformat/iamf_writer.c buffer overflow
  • If an upgrade is not immediately possible, isolate the FFmpeg process or restrict IAMF writer usage to trusted inputs
  • Enable runtime mitigations such as stack canaries, ASLR, and DEP to reduce the chance of successful exploitation

Generated by OpenCVE AI on September 21, 2026 at 05:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 21 Sep 2026 06:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in FFmpeg IAMF Writer

Sun, 13 Sep 2026 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
CPEs cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 2.9, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Sun, 13 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamf_writer.c component FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c.

Mon, 07 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in FFmpeg IAMF Writer

Mon, 07 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in FFmpeg IAMF Writer
Weaknesses CWE-119

Mon, 07 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 02 Sep 2026 02:45:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in FFmpeg IAMF Writer
Weaknesses CWE-119

Wed, 02 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
First Time appeared Ffmpeg
Ffmpeg ffmpeg
Vendors & Products Ffmpeg
Ffmpeg ffmpeg

Tue, 01 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Description Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamf_writer.c component
References

Subscriptions

Ffmpeg Ffmpeg
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-13T21:58:20.581Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52295

cve-icon Vulnrichment

Updated: 2026-09-07T10:58:19.101Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-01T18:17:43.940

Modified: 2026-09-13T22:16:59.693

Link: CVE-2026-52295

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T06:00:09Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-125

    Out-of-bounds Read