← Database

CVE-2026-40962

MEDIUM CVSS: 4.9 Published: 2026-04-16 Modified: 2026-06-17

Description

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Affected Platforms

Ffmpeg Ffmpeg

Weakness Type

CWE-190

References