vulnti.work

FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap me…

高危 CVSS 7.8
CVECVE-2026-70632
首次发现2026-08-07 00:15 UTC
披露时间2026-08-06 22:18 UTC
最后更新2026-08-07 00:15 UTC
通道状态auto

摘要

FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame bu…

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

Lint 边界警告 (4)

以下是本次研判 lint 阶段发现的非阻塞性警告（如引用 URL 未在白名单内）。这些不影响漏洞条目可用性，仅为透明度披露（参 DR-002）。

  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD