CVE-2026-65706

The record

FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution.

Affected packages

Related vulnerabilities

• CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
• CVE-2026-88830 A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a… CWE-131
• CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. CWE-131
• CVE-2026-22590 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard… CWE-131
• CVE-2026-78221 An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN… CWE-131
• CVE-2026-18743 A flaw was found in popt. CWE-131
• CVE-2026-78002 A flaw was found in rsyslog. CWE-131
• CVE-2026-16924 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a… CWE-131