> CVE-2026-64835 [HIGH]

« BACK_TO_HOME
PUBLISHED
2026-07-22 18:17
MODIFIED
2026-07-22 18:17
CVSS_SCORE V3
8.7
EPSS (Prob. Exploit)
0.50%
Top 57.4%
DATA SOURCES:
NVD đź”— 2026-07-22 CWE MITRE đź”— 2026-11-01 FIRST EPSS đź”— 2026-11-01 OSV đź”— 2026-11-02

> DESCRIPTION

FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Network (N)
Exploit possible à distance via réseau (HTTP, API, etc.)
AC (Complexité d'Attaque)
Attack Complexity
Low (L)
Peu de conditions requises pour exploiter
PR (Privilèges Requis)
Privileges Required
None (N)
Aucune authentification requise
UI (Interaction Utilisateur)
User Interaction
Unknown (P)
Interaction inconnue
S (Périmètre)
Scope
Unchanged (U)
Impact reste dans le périmètre du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
High (H)
Divulgation totale d'informations
I (Impact Intégrité)
Integrity Impact
High (H)
Modification totale des données possible
A (Impact Disponibilité)
Availability Impact
High (H)
Interruption totale du service possible

> RÉSUMÉ DES IMPACTS

Confidentialité
High
Divulgation totale d'informations
Intégrité
High
Modification totale des données possible
Disponibilité
High
Interruption totale du service possible

> WEAKNESSES

CWE-787

> CWE DETAILED DESCRIPTIONS

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Backport fixes for CVE-2026-64835 and CVE-2026-58049
Backport fixes for CVE-2026-64835 and CVE-2026-58049
Red Hat Security Advisory: RHELAI 3.0 Backport fixes for CVE-2026-64835 and CVE-2026-58049
RHELAI 3.0 Backport fixes for CVE-2026-64835 and CVE-2026-58049
Red Hat Security Advisory: RHELAI 3.2 Backport fixes for CVE-2026-64835 and CVE-2026-58049
RHELAI 3.2 Backport fixes for CVE-2026-64835 and CVE-2026-58049
Red Hat Security Advisory: RHOAI 3.4.4 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm)
Red Hat AI Inference Server 3.2.2 (ROCm) is now available.
Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA) is now available.
Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)
Red Hat AI Inference Server 3.2.2 (CUDA) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (ROCm 6.4)
Red Hat AI Base Images 3.4.2 (ROCm 6.4) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (CUDA 13.0)
Red Hat AI Base Images 3.4.2 (CUDA 13.0) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (CUDA 12.9)
Red Hat AI Base Images 3.4.2 (CUDA 12.9) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (ROCm 7.1)
Red Hat AI Base Images 3.4.2 (ROCm 7.1) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (Spyre)
Red Hat AI Base Images 3.4.2 (Spyre) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (Gaudi)
Red Hat AI Base Images 3.4.2 (Gaudi) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (CPU)
Red Hat AI Base Images 3.4.2 (CPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (TPU)
Red Hat AI Base Images 3.4.2 (TPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (ROCm 7.14)
Red Hat AI Base Images 3.5.1 (ROCm 7.14) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (CUDA 12.9)
Red Hat AI Base Images 3.5.1 (CUDA 12.9) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (Spyre)
Red Hat AI Base Images 3.5.1 (Spyre) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (CUDA 13.0)
Red Hat AI Base Images 3.5.1 (CUDA 13.0) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (Rubin)
Red Hat AI Base Images 3.5.1 (Rubin) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (Gaudi)
Red Hat AI Base Images 3.5.1 (Gaudi) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (TPU)
Red Hat AI Base Images 3.5.1 (TPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (CPU)
Red Hat AI Base Images 3.5.1 (CPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.5.1 (Neuron)
Red Hat AI Base Images 3.5.1 (Neuron) is now available.
Red Hat Security Advisory: RHOAI 3.3.7 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: RHEL AI 3.0 RPM runtime CVE fix - ffmpeg
AIPCC Security Alerts identified CVEs in the 3.0 release of base-images. The CVE(s) are listed with a severity level of "Important" or higher.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (ROCm 7.0)
Red Hat AI Base Images 3.2.3 (ROCm 7.0) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (CUDA 12.9)
Red Hat AI Base Images 3.2.3 (CUDA 12.9) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (Spyre)
Red Hat AI Base Images 3.2.3 (Spyre) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (CPU)
Red Hat AI Base Images 3.2.3 (CPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (ROCm 6.4)
Red Hat AI Base Images 3.2.3 (ROCm 6.4) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.3 (TPU)
Red Hat AI Base Images 3.2.3 (TPU) is now available.
Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.7 security update
Updated Red Hat Enterprise Linux AI 3.3.7 container disk images are now available.
Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.7 security update
Updated Red Hat Enterprise Linux AI 3.3.7 container images are now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (CPU)
Red Hat AI Base Images 3.2.4 (CPU) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (Spyre)
Red Hat AI Base Images 3.2.4 (Spyre) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (ROCm 7.0)
Red Hat AI Base Images 3.2.4 (ROCm 7.0) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (CUDA 12.9)
Red Hat AI Base Images 3.2.4 (CUDA 12.9) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (ROCm 6.4)
Red Hat AI Base Images 3.2.4 (ROCm 6.4) is now available.
Red Hat Security Advisory: Red Hat AI Base Images 3.2.4 (TPU)
Red Hat AI Base Images 3.2.4 (TPU) is now available.
Red Hat Security Advisory: RHOAI 3.4.5 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder

AFFECTED PACKAGES:
Unknown / Unknown
13 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
22/07/2026 18:17
Source: NVD
đź“Š ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.
Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c...
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659
https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-a...
« BACK_TO_HOME