Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-66036

Fixed in a distro release EPSS <1%CVSS 8.8

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.

Published 2026-07-24 · CVE record · OSV

Products: FFMPEG

Distro releases

ReleasePackageFixed in
Chainguardeco-python-ffmpeg-6-minimalno fix
Chainguardeco-python-ffmpeg-6-minimal-devno fix
Chainguardeco-python-ffmpeg-6-minimal-staticno fix
Chainguardeco-python-ffmpeg-7-minimalno fix
Chainguardeco-python-ffmpeg-7-minimal-devno fix
Chainguardeco-python-ffmpeg-7-minimal-staticno fix
Chainguardeco-python-ffmpeg-8-minimal8.1.3-r0
Chainguardeco-python-ffmpeg-8-minimal-dev8.1.3-r0
Chainguardeco-python-ffmpeg-8-minimal-static8.1.3-r0
Chainguardffmpeg-6no fix
Chainguardffmpeg-7no fix
Chainguardffmpeg-7.1no fix
Chainguardffmpeg-8.0no fix
Chainguardffmpeg-8.18.1.3-r0
Chainguardffmpeg-fips-7.1no fix
Chainguardffmpeg-fips-7.1-devno fix
Chainguardffmpeg-fips-7.1-libavcodec61no fix
Chainguardffmpeg-fips-7.1-libavdevice61no fix
Chainguardffmpeg-fips-7.1-libavfilter10no fix
Chainguardffmpeg-fips-7.1-libavformat61no fix
Chainguardffmpeg-fips-7.1-libavutil59no fix
Chainguardffmpeg-fips-7.1-libpostproc58no fix
Chainguardffmpeg-fips-7.1-libswresample5no fix
Chainguardffmpeg-fips-7.1-libswscale8no fix
Chainguardffmpeg-fips-7.1-staticno fix
Chainguardffmpeg-fips-8.0no fix
Chainguardffmpeg-fips-8.0-devno fix
Chainguardffmpeg-fips-8.0-libavcodec62no fix
Chainguardffmpeg-fips-8.0-libavdevice62no fix
Chainguardffmpeg-fips-8.0-libavfilter11no fix
Chainguardffmpeg-fips-8.0-libavformat62no fix
Chainguardffmpeg-fips-8.0-libavutil60no fix
Chainguardffmpeg-fips-8.0-libswresample6no fix
Chainguardffmpeg-fips-8.0-libswscale9no fix
Chainguardffmpeg-fips-8.0-staticno fix
Chainguardtorchaudio-ffmpeg-tarballsno fix
Chainguardtorchaudio-ffmpeg-tarballs-4.4.4no fix
Chainguardtorchaudio-ffmpeg-tarballs-5.0.3no fix
Chainguardtorchaudio-ffmpeg-tarballs-6.0no fix
Debian 12ffmpegno fix
Debian 13ffmpegno fix
Debian 14ffmpeg7:9.0.2-1
Red Hat Enterprise Linux ai 3.0ffmpeg0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0ffmpeg-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0ffmpeg-debugsource0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0ffmpeg-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0ffmpeg-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0ffmpeg-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavcodec-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavcodec-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavcodec-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavdevice-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavdevice-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavdevice-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavfilter-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavfilter-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavfilter-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavformat-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavformat-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavformat-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavutil-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavutil-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libavutil-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libpostproc-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libpostproc-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libpostproc-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswresample-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswresample-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswresample-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswscale-free-rhai0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswscale-free-rhai-debuginfo0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.0libswscale-free-rhai-devel0:6.1.6-9.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg-debugsource0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3ffmpeg-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavcodec-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavcodec-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavcodec-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavdevice-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavdevice-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavdevice-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavfilter-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavfilter-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavfilter-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavformat-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavformat-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavformat-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavutil-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavutil-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libavutil-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libpostproc-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libpostproc-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libpostproc-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswresample-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswresample-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswresample-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswscale-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswscale-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.3libswscale-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg-debugsource0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4ffmpeg-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavcodec-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavcodec-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavcodec-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavdevice-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavdevice-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavdevice-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavfilter-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavfilter-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavfilter-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavformat-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavformat-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavformat-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavutil-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavutil-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libavutil-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libpostproc-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libpostproc-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libpostproc-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswresample-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswresample-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswresample-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswscale-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswscale-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.4libswscale-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg-debugsource0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5ffmpeg-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavcodec-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavcodec-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavcodec-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavdevice-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavdevice-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavdevice-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavfilter-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavfilter-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavfilter-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavformat-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavformat-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavformat-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavutil-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavutil-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libavutil-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libpostproc-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libpostproc-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libpostproc-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswresample-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswresample-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswresample-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswscale-free-rhai0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswscale-free-rhai-debuginfo0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.5libswscale-free-rhai-devel0:6.1.6-7.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg-debugsource0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6ffmpeg-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavcodec-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavcodec-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavcodec-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavdevice-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavdevice-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavdevice-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavfilter-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavfilter-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavfilter-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavformat-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavformat-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavformat-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavutil-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavutil-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libavutil-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libpostproc-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libpostproc-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libpostproc-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswresample-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswresample-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswresample-free-rhai-devel0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswscale-free-rhai0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswscale-free-rhai-debuginfo0:6.1.6-8.el9ai
Red Hat Enterprise Linux ai 3.6libswscale-free-rhai-devel0:6.1.6-8.el9ai
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSffmpeg-44.4.8-150400.3.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSffmpeg-44.4.8-150400.3.75.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Module for Package Hub 15 SP7ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Module for Package Hub 15 SP7ffmpeg-44.4.8-150600.13.55.1
SUSE Linux Enterprise Server 15 SP4-LTSSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Server 15 SP4-LTSSffmpeg-44.4.8-150400.3.75.1
SUSE Linux Enterprise Server 15 SP5-LTSSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Server 15 SP6-LTSSffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ffmpeg-44.4.8-150400.3.75.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Workstation Extension 15 SP7ffmpeg3.4.2-150200.11.79.1
SUSE Linux Enterprise Workstation Extension 15 SP7ffmpeg-44.4.8-150600.13.55.1
Ubuntu 26.10ffmpegno fix
Ubuntu Pro 14.04 LTSlibavno fix
Ubuntu Pro 16.04 LTSffmpeg7:2.8.17-0ubuntu0.1+esm15
Ubuntu Pro 18.04 LTSffmpeg7:3.4.11-0ubuntu0.1+esm13
Ubuntu Pro 20.04 LTSffmpeg7:4.2.7-0ubuntu0.1+esm14
Ubuntu Pro 22.04 LTSffmpeg7:4.4.2-0ubuntu0.22.04.1+esm13
Ubuntu Pro 24.04 LTSffmpeg7:6.1.1-3ubuntu5+esm11
Ubuntu Pro 26.04 LTSffmpeg7:8.0.1-3ubuntu2+esm3
Wolfiffmpeg-7no fix
Wolfiffmpeg-7.1no fix
Wolfiffmpeg-8.0no fix
Wolfiffmpeg-8.18.1.3-r0
openSUSE Leap 16.0ffmpeg-77.1.5-160000.1.1
openSUSE Tumbleweedffmpeg-44.4.8-4.1
openSUSE Tumbleweedffmpeg-77.1.5-2.1
openSUSE Tumbleweedffmpeg-88.1.2-3.1
openSUSE Tumbleweedffmpeg-99.0.1-2.1