CVE-2026-64833 Details
Description
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.
A vulnerability allowing out-of-bounds read has been identified in FFmpeg versions 0.7.1 prior to 8.1.2. This issue resides in the S/PDIF muxer, specifically within the 'spdif_header_dts4' function. The vulnerability allows attackers to read memory beyond buffer limits by sending a crafted DTS stream that includes a 'core_size' value larger than the actual packet length. Exploitation of this vulnerability occurs during S/PDIF re-muxing, when the missing bounds check is triggered by a malicious DTS-HD audio stream, leading to unauthorized memory access.
Users can upgrade to FFmpeg versions 8.1.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ffmpeg ffmpeg | >= 0.7.1, <= 8.1.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 12, 2026 | CVE Modified | CISA-ADP |
| Jul 28, 2026 | Initial Analysis | [email protected] |
| Jul 22, 2026 | CVE Modified | CISA-ADP |
| Jul 22, 2026 | New CVE Received | [email protected] |