An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

debian_linux dsa-6361: Debian dsa-6361 : ffmpeg - security update

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2444-1 advisory.

    This update for ffmpeg-4 fixes the following issues

    Update to version 4.4.7:

    - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545).
    - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options     function of sbgdec.c       within the libavformat module. When parsing certain options, the software does not adequately validate     the i       (bsc#1234030).
    - CVE-2025-1594: stack-based buffer overflow in function ff_aac_search_for_tns of the file     libavcodec/aacenc_tns.c of       the component AAC Encoder (bsc#1237561).
    - CVE-2025-9951: heap-based buffer overflow in jpeg2000dec (bsc#1249393).
    - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).
    - CVE-2025-63757: accumulation of filtered pixel values can lead to an integer overflow (bsc#1255392).
    - CVE-2026-30997: Denial of Service via out-of-bounds read (bsc#1262047).
    - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2445-1 advisory.

    This update for ffmpeg-4 fixes the following issues

    Update to version 4.4.7:

    - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545).
    - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options     function of sbgdec.c       within the libavformat module. When parsing certain options, the software does not adequately validate     the i       (bsc#1234030).
    - CVE-2025-1594: stack-based buffer overflow in function ff_aac_search_for_tns of the file     libavcodec/aacenc_tns.c of       the component AAC Encoder (bsc#1237561).
    - CVE-2025-9951: heap-based buffer overflow in jpeg2000dec (bsc#1249393).
    - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).
    - CVE-2025-63757: accumulation of filtered pixel values can lead to an integer overflow (bsc#1255392).
    - CVE-2026-30997: Denial of Service via out-of-bounds read (bsc#1262047).
    - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20914-1 advisory.

    Changes in ffmpeg-4:

    - CVE-2026-30997: avcodec/av1dec: check that primary_ref_frame is within range (bsc#1262047)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FFmpeg installed on the remote host is 8.0.1 or earlier. It is, therefore, affected by multiple vulnerabilities:

  - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows     attackers to cause a Denial of Service (DoS) via a crafted input. (CVE-2026-30997)

  - An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg     v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
    (CVE-2026-30998)

  - A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a     Denial of Service (DoS) via a crafted input. (CVE-2026-30999)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows     attackers to cause a Denial of Service (DoS) via a crafted input. (CVE-2026-30997)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
321754	SUSE SLES15 Security Update : ffmpeg-4 (SUSE-SU-2026:2444-1)	Nessus	SuSE Local Security Checks	high
321694	SUSE SLED15 / SLES15 Security Update : ffmpeg-4 (SUSE-SU-2026:2445-1)	Nessus	SuSE Local Security Checks	high
320414	openSUSE 16 Security Update : ffmpeg-4 (openSUSE-SU-2026:20914-1)	Nessus	SuSE Local Security Checks	high
307356	FFmpeg <= 8.0.1 Multiple Vulnerabilities	Nessus	Misc.	high
306541	Linux Distros Unpatched Vulnerability : CVE-2026-30997	Nessus	Misc.	high

Detections

Analytics

CVE-2026-30997

high

Tenable Plugins

Coming Soon

high

high

high

high

high