JLSEC-2026-1189

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-1189.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1189.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2026-1189

Upstream

CVE-2026-70629

EUVD-2026-54161

GHSA-824f-v6qw-342h

Published

2026-08-07T13:27:45.313Z

Modified

2026-08-08T23:15:05.811076068Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...

Details

FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services.

Database specific

{
    "sources": [
        {
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-70629",
            "database_specific": {
                "status": "Received"
            },
            "id": "CVE-2026-70629",
            "imported": "2026-08-08T05:25:26.315Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70629",
            "published": "2026-08-06T22:18:27.123Z",
            "modified": "2026-08-07T18:17:21.927Z"
        },
        {
            "url": "https://api.github.com/advisories/GHSA-824f-v6qw-342h",
            "id": "GHSA-824f-v6qw-342h",
            "imported": "2026-08-08T05:25:08.359Z",
            "html_url": "https://github.com/advisories/GHSA-824f-v6qw-342h",
            "published": "2026-08-07T00:31:21Z",
            "modified": "2026-08-07T18:32:48Z"
        },
        {
            "id": "EUVD-2026-54161",
            "modified": "2026-08-07T17:11:20Z",
            "imported": "2026-08-08T05:24:17.753Z",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54161",
            "published": "2026-08-06T21:25:08Z",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-54161"
        }
    ],
    "license": "CC-BY-4.0"
}

References

Affected packages

Julia / FFMPEG_jll

Package

Name: FFMPEG_jll
Purl: pkg:julia/FFMPEG_jll?uuid=b22a6f82-2f65-5046-a5b2-351ab43fb4e5

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1189.json"

Julia / FFMPEG_nogpl_jll

Package

Name: FFMPEG_nogpl_jll
Purl: pkg:julia/FFMPEG_nogpl_jll?uuid=a6892c6b-5768-548c-b024-ff8dabf482c5

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1189.json"

Julia / FFplay_jll

Package

Name: FFplay_jll
Purl: pkg:julia/FFplay_jll?uuid=c4dce911-e170-5107-8314-c7bdc6785395

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1189.json"