Out-of-Bounds Write Vulnerability in FFmpeg TDSC Video Decoder

CVE-2026-65703

What is CVE-2026-65703?

FFmpeg versions 2.7 to 8.1.2 are susceptible to an out-of-bounds write vulnerability in the TDSC video decoder. This flaw occurs when remote attackers supply a maliciously crafted AVI file that alters frame dimensions across TDSF frames. The flawed tdsc_parse_tdsf() function neglects to properly unreference the existing reference frame before invoking av_frame_get_buffer(). As a result, the tdsc_blit() and tdsc_yuv2rgb() functions can erroneously write pixel data controlled by the attacker beyond the bounds of the reference frame buffer, potentially leading to process crashes and the execution of arbitrary code.

References