CVE-2026-75144 | BDVDB-2026-362579 Detail

Description#

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-19Record published in the CVE List.
2. Version 22026-10-27Most recent update recorded in the CVE List.