FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC
    hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by
    supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value
    exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the
    vk_hevc_end_frame function, potentially achieving arbitrary code execution. (CVE-2026-64831)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC     hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by     supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value     exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the     vk_hevc_end_frame function, potentially achieving arbitrary code execution. (CVE-2026-64831)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
459005	Echo: ffmpeg: security update to 7:7.1.5-0+deb13u1	Tenable Cloud Security	Echo Local Security Checks	Local	high
459005	Echo: ffmpeg: security update to 7:7.1.5-0+deb13u1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
329540	Linux Distros Unpatched Vulnerability : CVE-2026-64831	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-64831

high

Tenable Plugins

high

high

high