Out-of-Bounds Read Vulnerability in Signed Video Framework by Axis Communications
CVE-2026-14918

5.3MEDIUM

Key Information:

Vendor

Axis Communications Ab

Status
Signed Video Framework
Signed Media Verifier
Axis File Player
Vendor
CVE Published:
10 November 2026

What is CVE-2026-14918?

The Signed Video Framework by Axis Communications is impacted by an out-of-bounds read issue, which may cause applications utilizing this framework to experience crashes. This vulnerability specifically affects the tools for validating signed content. However, the signed video functionality on AXIS OS devices remains unaffected, ensuring that end-user experience is preserved.

Affected Version(s)

Axis File Player 0 < 3.1.10.0

Signed media verifier 0 < 1.0.3

Signed Video Framework 0 < 2.3.7

References

https://www.axis.com/dam/public/3b/4f/06/cve-2026-14918pd...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martin Holecek
.