SUSE-SU-2026:3934-1: ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:3934-1 is a vulnerability in ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 03-09-2026
   PublishedVulnerability first disclosed.
2. 10-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2026-64833: out-of-bounds read in the S/PDIF muxer via a crafted DTS stream with a `core_size` value larger than the actual packet length (bsc#1272755). - CVE-2026-64834: infinite loop in the RTP/ASF demuxer via a crafted RTP/ASF stream (bsc#1272757). - CVE-2026-65703: out-of-bounds write in the TDSC video decoder via a crafted AVI file that changes frame dimensions across TDSF frames(bsc#1272759). - CVE-2026-65705: out-of-bounds write in the `vf_floodfill` video filter via a dynamically sized video stream with filtergraph reinitialization disabled via `-reinit_filter 0` (bsc#1272761). - CVE-2026-65706: out-of-bounds write in the `vf_swaprect` video filter via a crafted NV12 video frame with odd width dimensions(bsc#1272762). - CVE-2026-66036: out-of-bounds write in the `vf_hqdn3d` filter via a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the `-reinit_filter 0` option (bsc#1272763).

No weakness data has been published for this record.