8.8

CVE-2026-30754: ffmpeg Out-of-bounds Write

CVSS: 8.8v3.1HighAnalyzed
AliasesUBUNTU-CVE-2026-30754DEBIAN-CVE-2026-30754CGA-2ffp-rjx5-h28h
Published 08-09-2026Last modified 09-09-2026
Open JSON

Vulnerability summary

CVE-2026-30754 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in ffmpeg. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 43.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
45/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.52%
0%100%
Low · +0.18 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
USN-8915-1

Timeline

  1. 08-09-2026
    PublishedVulnerability first disclosed.
  2. 09-09-2026
    Last modifiedVulnerability information updated.

Description

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using AddressSanitizer.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

0.52%

Chance of exploitation in the next 30 days

Percentile

43%

Versus all other CVEs

30-day change

+0.18 pp

From 0.35% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Poc Ffmpeg

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Chainguard14 products
  • eco-python-ffmpeg-6-minimalAll versions (No fix recorded)
  • eco-python-ffmpeg-6-minimal-devAll versions (No fix recorded)
  • eco-python-ffmpeg-6-minimal-staticAll versions (No fix recorded)
  • eco-python-ffmpeg-7-minimalAll versions (No fix recorded)
  • eco-python-ffmpeg-7-minimal-devAll versions (No fix recorded)
Wolfi3 products
  • ffmpeg-7All versions (No fix recorded) | < 7.1.3-r0
  • ffmpeg-7.1All versions (No fix recorded) | < 7.1.3-r0
  • ffmpeg-8.0All versions (No fix recorded) | < 8.0.1-r0
Ubuntu2 products
  • ffmpegAll versions (No fix recorded) | < 7:2.8.17-0ubuntu0.1+esm18 | < 7:3.4.11-0ubuntu0.1+esm16 | < 7:4.2.7-0ubuntu0.1+esm18 | < 7:4.4.2-0ubuntu0.22.04.1+esm17 | < 7:6.1.1-3ubuntu5+esm15
  • libavAll versions (No fix recorded)
Debian1 product
  • ffmpeg< 7:5.1.8-0+deb12u1 | < 7:7.1.3-0+deb13u1 | < 7:8.0.1-2
Ffmpeg1 product

5 vendors · 21 products

References

9 links