← Back to CVE List
CVE-2026-90815NVD
Vulnerability Summary
A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0 can resolve this issue. The name of the patch is 8970658472/e24b9820b4. It is suggested to upgrade the affected component.
CVSS v4.0 Base Metrics — Score 5.3 (MEDIUM)
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionPassive
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)Low
Availability (Vulnerable System)Low
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
CVSS v3.1 Base Metrics — Score 6.3 (MEDIUM)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityLow
IntegrityLow
AvailabilityLow
Affected & Patched Versions
- n/a FFmpeg >= 4.4.0
- n/a FFmpeg >= 4.4.1
- n/a FFmpeg >= 4.4.2
- n/a FFmpeg >= 4.4.3
- n/a FFmpeg >= 4.4.4
- n/a FFmpeg >= 4.4.5
- n/a FFmpeg >= 4.4.6
- n/a FFmpeg >= 5.1.0
- n/a FFmpeg >= 5.1.1
- n/a FFmpeg >= 5.1.2
- n/a FFmpeg >= 5.1.3
- n/a FFmpeg >= 5.1.4
- n/a FFmpeg >= 5.1.5
- n/a FFmpeg >= 5.1.6
- n/a FFmpeg >= 5.1.7
- n/a FFmpeg >= 5.1.8
- n/a FFmpeg >= 6.1.0
- n/a FFmpeg >= 6.1.1
- n/a FFmpeg >= 6.1.2
- n/a FFmpeg >= 6.1.3
- n/a FFmpeg >= 6.1.4
- n/a FFmpeg >= 7.1.0
- n/a FFmpeg >= 7.1.1
- n/a FFmpeg >= 7.1.2
- n/a FFmpeg >= 7.1.3
- n/a FFmpeg >= 8.0.0
- n/a FFmpeg >= 8.0.1
Not provided by cveorg for this CVE.