What is CVE-2026-65706?
CVE-2026-65706 is an out-of-bounds write vulnerability in FFmpeg's vf_swaprect video filter, affecting versions 3.0 through 8.1.2. It occurs when processing crafted NV12 video frames with odd width dimensions, due to improper handling of a temporary row buffer in the filter_frame() function, allowing heap memory corruption.
Azərbaycanca: CVE-2026-65706 FFmpeg-in vf_swaprect video filtrində heap yaddaşını pozmağa imkan verən out-of-bounds yazma zəifliyidir. NV12 formatlı, tək en ölçülü video kadrları emal edərkən filter_frame() funksiyasındakı müvəqqəti bufer problemi səbəbindən yaranır. FFmpeg-in 3.0-dan 8.1.2-yə qədər versiyalarını istifadə edən sistemlər risk altındadır, dərhal yeniləmə tətbiq edilməlidir.
Related CVEs
link basis: same weakness class CWE-787; shared vendor: FFmpeg
FAQ2
Which FFmpeg component does CVE-2026-65706 affect and how does the vulnerability occur?
The vulnerability affects FFmpeg's vf_swaprect video filter. It occurs due to improper handling of a temporary row buffer in the filter_frame() function when processing crafted NV12 video frames with odd width dimensions, leading to an out-of-bounds write.
Which versions of FFmpeg are affected by CVE-2026-65706?
FFmpeg versions from 3.0 through 8.1.2 are affected by this vulnerability.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.