> USN-8915-1: FFmpeg vulnerabilities

[SOURCE] Ubuntu Security Notices [DATE: 12/10/2026 23:14] [LANGUAGE: EN]

Momoko Shiraishi discovered that FFmpeg did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
(CVE-2026-30754)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-38344)

It was discovered that FFmpeg did not correctly handle certain arithmetic
operations. An attacker could possibly use this issue to cause a denial of
service. (CVE-2026-38346, CVE-2026-38348, CVE-2026-38349)

It was discovered that FFmpeg did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38347)

It was discovered that FFmpeg did not correctly handle certain arithmetic
operations. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-38350)

Joshua Rogers discovered that FFmpeg did not correctly handle certain
memory operations. An attacker could possibly use this issue to leak
sensitive information. This issue only affected Ubuntu 26.04 LTS.
(CVE-2026-75147)

[messages.read_original_source] →