Out-of-bounds Read Vulnerability in FFmpeg Affected by Missing Padding

CVE-2026-52296

What is CVE-2026-52296?

An out-of-bounds read vulnerability exists in FFmpeg due to missing required padding during the allocation of WMA extradata within the libavcodec module. This flaw can potentially allow attackers to read memory locations beyond the intended bounds, leading to information disclosure or unwanted behavior in applications using the affected versions.

References