A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file
    libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument
    duration/target_duration results in denial of service. The attack is possible to be carried out remotely.
    Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4.
    Upgrading the affected component is recommended. (CVE-2026-90816)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file     libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument     duration/target_duration results in denial of service. The attack is possible to be carried out remotely.
    Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4.
    Upgrading the affected component is recommended. (CVE-2026-90816)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
455410	Echo: ffmpeg: security update to 7:7.1.5-0+deb13u1+e8	Tenable Cloud Security	Echo Local Security Checks	Local	medium
455410	Echo: ffmpeg: security update to 7:7.1.5-0+deb13u1+e8	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
345958	Linux Distros Unpatched Vulnerability : CVE-2026-90816	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-90816

medium

Tenable Plugins

medium

medium

medium