CVE-2026-65706
Received Received - Intake

Heap Out-of-Bounds Write in FFmpeg Video Filter

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: VulnCheck

Description
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-24
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-65706
EUVD
EUVD-2026-48373

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ffmpeg ffmpeg From 3.0 (inc) to 8.1.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-131 The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds write vulnerability in FFmpeg's vf_swaprect video filter affecting versions 3.0 through 8.1.2. It occurs when processing crafted NV12 video frames with odd width dimensions. The filter_frame() function incorrectly reuses a buffer sized for single-byte pixels across all planes, causing an 18-byte memcpy into a 17-byte allocation during chroma plane processing. This leads to heap corruption, potential process crashes, and possible code execution.

Detection Guidance

Detecting this vulnerability requires checking FFmpeg versions and analyzing video processing operations. Use 'ffmpeg -version' to verify if your version is between 3.0 and 8.1.2. Monitor logs for crashes during video filter operations, particularly with NV12 frames. Check for heap corruption errors in system logs or application crash reports.

Impact Analysis

If exploited, this vulnerability could allow attackers to crash the FFmpeg process or execute arbitrary code on your system. Since FFmpeg is widely used for media processing, successful exploitation might compromise applications or services relying on vulnerable versions. The attack requires user interaction to process a malicious video file.

Mitigation Strategies

Immediately update FFmpeg to the latest patched version. If updating is not possible, disable the vf_swaprect filter by removing or renaming the filter module. Restrict access to FFmpeg processing to trusted users only. Monitor for suspicious video files that may trigger the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65706. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart