medium4.9
CVE-2026-40962
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
Impact
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ffmpeg | Ffmpeg | before 8.1 |