AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-18393

Red Hat FFmpeg: denial of service

Red Hat

CVE-2026-18393 · Published Aug 28, 2026

Medium5.4
No fix yet
Red Hat advisory

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond

the bounds of a heap-allocated buffer when processing crafted TDSC cursor

data. A remote attacker could exploit this by supplying a specially crafted

video file, potentially leading to a denial of service or arbitrary code

execution.

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux AI (RHEL AI) 3
Product
all versionsNo fix yet
Red Hat OpenShift AI (RHOAI)
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-787

More Red Hat advisories

All Red Hat
Medium 6.1Aug 28Red Hat file-psd plugin: out-of-bounds readCVE-2026-82343no fix yetMedium 5.5Aug 28Red Hat libsolv: denial of serviceCVE-2026-82327no fix yetMedium 6.1Aug 28Red Hat file-ico plugin: out-of-bounds readCVE-2026-82328no fix yetMedium 6.1Aug 28Red Hat file-pvr plugin: out-of-bounds readCVE-2026-82330no fix yetMedium 6.1Aug 28Red Hat GIMP: denial of serviceCVE-2026-82324no fix yetMedium 5.9Aug 28Red Hat Ansible Automation Platform 2: resource exhaustionCVE-2026-80179no fix yet