Heap Buffer Overflow in FFmpeg's DVB Subtitle Parser

CVE-2026-70628

What is CVE-2026-70628?

A signed integer overflow vulnerability has been identified in FFmpeg's DVB subtitle parser. This issue exists in versions of the software from 0.5 up to, but not including, 9.0. It arises when a crafted WTV file is supplied, leading to a heap buffer overflow due to the bounds-check guard expression wrapping to INT_MIN. This flaw permits attackers to bypass the PARSE_BUF_SIZE comparison, resulting in memcpy() operations that inject attacker-controlled data into a heap buffer. The consequences of this vulnerability include the potential for memory corruption or unintended code execution, making it vital for users to upgrade to the latest version.

References