CVE-2026-30997

| EUVD-2026-21972 HIGH
2026-04-13 mitre
Denial Of Service Buffer Overflow Information Disclosure N A
7.5
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Apr 15, 2026 - 12:29 vuln.today
CVSS Changed
Apr 13, 2026 - 20:22 NVD
7.5 (HIGH)

DescriptionNVD

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

AnalysisAI

Out-of-bounds read in FFmpeg 8.0.1's AV1 decoder allows remote denial-of-service via malicious video files. Attackers craft inputs targeting read_global_param() in libavcodec/av1dec.c to trigger memory access violations, crashing the decoder. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all systems running FFmpeg 8.0.1 and document their network exposure, particularly media servers and video transcoding services. Within 7 days: Implement network-level controls restricting AV1 video file uploads from untrusted sources, and disable AV1 decoding in FFmpeg configurations where feasible until a patch is released. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-30997 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy