
CVE catalog
CVE-2026-66039
FFmpeg through 8.1.2, fixed in commit aafb5c6…
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.
- Severity
- High · CVSS 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.31% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [
{
"name": "ffmpeg",
"status": "fixed",
"release": "sid",
"version": "7:9.0.2-4"
},
{
"name": "ffmpeg",
"status": "fixed",
"release": "forky",
"version": "7:9.0.2-4"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "trixie",
"version": "7:7.1.5-0+deb13u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "trixie-security",
"version": "7:7.1.5-0+deb13u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "bookworm",
"version": "7:5.1.9-0+deb12u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "bookworm-security",
"version": "7:5.1.9-0+deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "7:9.0.2-1"
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "7:9.0.2-1"
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "ffmpeg",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "ffmpeg-doc",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavcodec-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavcodec-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavcodec-extra60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavcodec60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavdevice-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavdevice60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavfilter-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavfilter-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavfilter-extra9",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavfilter9",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavformat-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavformat-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavformat-extra60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavformat60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavutil-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libavutil58",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libpostproc-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libpostproc57",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libswresample-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libswresample4",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libswscale-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "libswscale7",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm11",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm11"
},
{
"name": "ffmpeg",
"distro": "fedora",
"release": "44",
"versions": [
"0:8.1.3-1.fc44"
],
"ecosystem": "rpm",
"vendor_status": "fixed",
"provider_record_id": "FEDORA-2026-3E109A0C85#CVE-2026-66039"
}
]
}Publisher notes
[trixie] ffmpeg: Wait until fixed in 7.1.x upstream branch
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [ffmpeg]Unknown
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [ffmpeg-doc]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· all · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-extra59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavdevice59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavdevice-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter8]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-extra8]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-extra59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavutil57]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavutil-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libpostproc56]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libpostproc-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2026:74771]
- [https://bodhi.fedoraproject.org/updates/FEDORA-2026-3e109a0c85]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2494554]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2507020]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2508218]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2508449]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2510587]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2510588]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2510589]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2510601]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2511358]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2516040]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2516073]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2516126]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2519501]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2519576]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2519643]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2519667]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2525514]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2525517]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2525518]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2525521]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2525523]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2526159]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21522-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-66039]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-66039]
- [https://security-tracker.debian.org/tracker/CVE-2026-66039]
- [https://ubuntu.com/security/notices/USN-8671-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2526.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Fedora security updates (Bodhi)] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]