7.5
CVE-2026-90815
- EPSS 0.24%
- Veröffentlicht 14.09.2026 19:45:05
- Zuletzt bearbeitet 15.09.2026 15:17:29
- Erkennungen
FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0 can resolve this issue. The name of the patch is 8970658472/e24b9820b4. It is suggested to upgrade the affected component.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellern/a
≫
Produkt
FFmpeg
Version
4.4.0
Status
affected
Version
4.4.1
Status
affected
Version
4.4.2
Status
affected
Version
4.4.3
Status
affected
Version
4.4.4
Status
affected
Version
4.4.5
Status
affected
Version
4.4.6
Status
affected
Version
5.1.0
Status
affected
Version
5.1.1
Status
affected
Version
5.1.2
Status
affected
Version
5.1.3
Status
affected
Version
5.1.4
Status
affected
Version
5.1.5
Status
affected
Version
5.1.6
Status
affected
Version
5.1.7
Status
affected
Version
5.1.8
Status
affected
Version
6.1.0
Status
affected
Version
6.1.1
Status
affected
Version
6.1.2
Status
affected
Version
6.1.3
Status
affected
Version
6.1.4
Status
affected
Version
7.1.0
Status
affected
Version
7.1.1
Status
affected
Version
7.1.2
Status
affected
Version
7.1.3
Status
affected
Version
8.0.0
Status
affected
Version
8.0.1
Status
affected
Version
4.4.7
Status
unaffected
Version
5.1.9
Status
unaffected
Version
6.1.5
Status
unaffected
Version
7.1.4
Status
unaffected
Version
8.0.2
Status
unaffected
Version
8.1.1
Status
unaffected
Version
9.0
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.155 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 2.1 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
| cna@vuldb.com | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://ffmpeg.org/
https://vuldb.com/vuln/403317
https://vuldb.com/vuln/403317/cti
https://vuldb.com/cve/CVE-2026-90815
https://vuldb.com/submit/922609
https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1