Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-75144 →
DEBIAN-CVE-2026-75144
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:9.0.2-1"}]}]
Références
- advisory security-tracker.debian.org