An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21258-1 advisory.

    This update for ffmpeg-7 fixes the following issue:

    - CVE-2026-30997: out-of-bounds read in the `read_global_param()` function allows for a DoS via crafted     input       (bsc#1262047).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6361 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6361-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 22, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : ffmpeg     CVE ID         : CVE-2025-22921 CVE-2026-8461 CVE-2026-30997

    Several vulnerabilities have been discovered in the FFmpeg multimedia     framework, which could result in denial of service or potentially the     execution of arbitrary code if malformed files/streams are processed.

    For the stable distribution (trixie), these problems have been fixed in     version 7:7.1.5-0+deb13u1.

    We recommend that you upgrade your ffmpeg packages.

    For the detailed security status of ffmpeg please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ffmpeg

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2444-1 advisory.

    This update for ffmpeg-4 fixes the following issues

    Update to version 4.4.7:

    - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545).
    - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options     function of sbgdec.c       within the libavformat module. When parsing certain options, the software does not adequately validate     the i       (bsc#1234030).
    - CVE-2025-1594: stack-based buffer overflow in function ff_aac_search_for_tns of the file     libavcodec/aacenc_tns.c of       the component AAC Encoder (bsc#1237561).
    - CVE-2025-9951: heap-based buffer overflow in jpeg2000dec (bsc#1249393).
    - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).
    - CVE-2025-63757: accumulation of filtered pixel values can lead to an integer overflow (bsc#1255392).
    - CVE-2026-30997: Denial of Service via out-of-bounds read (bsc#1262047).
    - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2445-1 advisory.

    This update for ffmpeg-4 fixes the following issues

    Update to version 4.4.7:

    - CVE-2023-6601: HLS Unsafe File Extension Bypass (bsc#1220545).
    - CVE-2024-35366: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options     function of sbgdec.c       within the libavformat module. When parsing certain options, the software does not adequately validate     the i       (bsc#1234030).
    - CVE-2025-1594: stack-based buffer overflow in function ff_aac_search_for_tns of the file     libavcodec/aacenc_tns.c of       the component AAC Encoder (bsc#1237561).
    - CVE-2025-9951: heap-based buffer overflow in jpeg2000dec (bsc#1249393).
    - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).
    - CVE-2025-63757: accumulation of filtered pixel values can lead to an integer overflow (bsc#1255392).
    - CVE-2026-30997: Denial of Service via out-of-bounds read (bsc#1262047).
    - CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20914-1 advisory.

    Changes in ffmpeg-4:

    - CVE-2026-30997: avcodec/av1dec: check that primary_ref_frame is within range (bsc#1262047)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FFmpeg installed on the remote host is 8.0.1 or earlier. It is, therefore, affected by multiple vulnerabilities:

  - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows     attackers to cause a Denial of Service (DoS) via a crafted input. (CVE-2026-30997)

  - An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg     v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
    (CVE-2026-30998)

  - A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a     Denial of Service (DoS) via a crafted input. (CVE-2026-30999)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows     attackers to cause a Denial of Service (DoS) via a crafted input. (CVE-2026-30997)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326066	openSUSE 16: ffmpeg-7 / ffmpeg-7-libavcodec-devel / ffmpeg-7-libavdevice-devel / etc (openSUSE-SU-2026:21258-1)	Nessus	SuSE Local Security Checks	high
321987	Debian dsa-6361 : ffmpeg - security update	Nessus	Debian Local Security Checks	high
321754	SUSE SLES15 Security Update : ffmpeg-4 (SUSE-SU-2026:2444-1)	Nessus	SuSE Local Security Checks	high
321694	SUSE SLED15 / SLES15 Security Update : ffmpeg-4 (SUSE-SU-2026:2445-1)	Nessus	SuSE Local Security Checks	high
320414	openSUSE 16 Security Update : ffmpeg-4 (openSUSE-SU-2026:20914-1)	Nessus	SuSE Local Security Checks	high
307356	FFmpeg <= 8.0.1 Multiple Vulnerabilities	Nessus	Misc.	high
306541	Linux Distros Unpatched Vulnerability : CVE-2026-30997	Nessus	Misc.	high

Detections

Analytics

CVE-2026-30997

high

Tenable Plugins

high

high

high

high

high

high

high