SUSE-SU-2026:23232-1: ffmpeg-7&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:23232-1 is a vulnerability in ffmpeg-7&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 12-08-2026PublishedVulnerability first disclosed.
- 27-08-2026Last modifiedVulnerability information updated.
Description
Security update for ffmpeg-7 This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752). - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754). - CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder (bsc#1272758). - CVE-2026-66038: LCL/ZLIB Video Decoder Information Disclosure via lcldec.c (bsc#1272768). - CVE-2026-66039: MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File (bsc#1272765). - CVE-2026-66041: Heap Out-of-Bounds Write via vf_quirc Filter (bsc#1272767).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- ffmpeg-7&distro=SUSE Linux Enterprise Server 16.0< 7.1.4-160000.3.1
- ffmpeg-7&distro=SUSE Linux Enterprise Server for SAP applications 16.0< 7.1.4-160000.3.1
1 vendor · 2 products