Buffer Overflow Vulnerability in FFmpeg Affects Multiple Versions

CVE-2026-52295

What is CVE-2026-52295?

A buffer overflow vulnerability has been identified in FFmpeg versions 7.0 and later. This flaw exists within the libavformat component, specifically in the iamf_writer.c file. An attacker could exploit this vulnerability to create conditions causing a denial of service. By crafting a specially designed input file, an attacker may manipulate the application's behavior, potentially leading to crashes or other unintended disruptions.

References