A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8750-1 advisory.

    Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or     automated system were tricked into opening a specially crafted file, an attacker could cause a denial of     service. (CVE-2026-12706)

    Xinghang Lv discovered that FFmpeg did not correctly handle certain memory operations. If a user or     automated system were tricked into opening a specially crafted file, an attacker could cause a denial of     service. (CVE-2026-30999)

    It was discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated     system were tricked into opening a specially crafted file, an attacker could cause a denial of service.
    (CVE-2026-58049)

    Adrian Junge discovered that FFmpeg did not correctly handle certain memory operations. If a user or     automated system were tricked into opening a specially crafted file, an attacker could leak sensitive     information. (CVE-2026-70629, CVE-2026-70630, CVE-2026-70631)

    Ori Hollander discovered that FFmpeg did not correctly handle certain memory operations. If a user or     automated system were tricked into opening a specially crafted file, an attacker could possibly cause a     denial of service or execute arbitrary code. (CVE-2026-8461)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bc8f441ba4 advisory.

    The latest stable FFmpeg release from the 8.1 release branch.
    https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n8.1.2:/Changelog

    Fixes CVE-2026-30999 .

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FFmpeg installed on the remote host is 8.0.1 or earlier. It is, therefore, affected by multiple vulnerabilities:

  - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows     attackers to cause a Denial of Service (DoS) via a crafted input. (CVE-2026-30997)

  - An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg     v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
    (CVE-2026-30998)

  - A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a     Denial of Service (DoS) via a crafted input. (CVE-2026-30999)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a     Denial of Service (DoS) via a crafted input. (CVE-2026-30999)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
345735	Ubuntu 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-8750-1)	Nessus	Ubuntu Local Security Checks	Local	high
322114	Fedora 44 : ffmpeg (2026-bc8f441ba4)	Nessus	Fedora Local Security Checks	Local	high
307356	FFmpeg <= 8.0.1 Multiple Vulnerabilities	Nessus	Misc.	Local	high
306747	Linux Distros Unpatched Vulnerability : CVE-2026-30999	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-30999

high

Tenable Plugins

high

high

high

high