FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106178 advisory.

    FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the     vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame     resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0     option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized     per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause     denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60335 advisory.

    RPM packages are internal build artifacts and not supported on their own. They are only supported as part     of the Red Hat AI application platform.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60336 advisory.

    RPM packages are internal build artifacts and not supported on their own. They are only supported as part     of the Red Hat AI application platform.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60334 advisory.

    RPM packages are internal build artifacts and not supported on their own. They are only supported as part     of the Red Hat AI application platform.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the     vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame     resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0     option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized     per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause     denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.
    (CVE-2026-66036)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
342891	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106178)	Nessus	Unity Linux Local Security Checks	Local	high
340971	RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:60335)	Nessus	Red Hat Local Security Checks	Local	high
340733	RHEL 9 : RHEL AI 3.3 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:60336)	Nessus	Red Hat Local Security Checks	Local	high
340160	RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:60334)	Nessus	Red Hat Local Security Checks	Local	high
329726	Linux Distros Unpatched Vulnerability : CVE-2026-66036	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-66036

high

Tenable Plugins

high

high

high

high

high