SUSE-SU-2026:23232-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202623232-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23232-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:23232-1
- Upstream
- Related
- Published
- 2026-08-12T08:07:23Z
- Modified
- 2026-08-27T18:23:27Z
- Summary
- Security update for ffmpeg-7
- Details
-
This update for ffmpeg-7 fixes the following issues:
- CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer (bsc#1272752).
- CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754).
- CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder (bsc#1272758).
- CVE-2026-66038: LCL/ZLIB Video Decoder Information Disclosure via lcldec.c (bsc#1272768).
- CVE-2026-66039: MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File (bsc#1272765).
- CVE-2026-66041: Heap Out-of-Bounds Write via vf_quirc Filter (bsc#1272767).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202623232-1/
- https://bugzilla.suse.com/1272752
- https://bugzilla.suse.com/1272754
- https://bugzilla.suse.com/1272758
- https://bugzilla.suse.com/1272765
- https://bugzilla.suse.com/1272767
- https://bugzilla.suse.com/1272768
- https://www.suse.com/security/cve/CVE-2026-64830
- https://www.suse.com/security/cve/CVE-2026-64832
- https://www.suse.com/security/cve/CVE-2026-64835
- https://www.suse.com/security/cve/CVE-2026-66038
- https://www.suse.com/security/cve/CVE-2026-66039
- https://www.suse.com/security/cve/CVE-2026-66041
Affected packages
SUSE:Linux Enterprise Server 16.0 / ffmpeg-7
Package
- Name
- ffmpeg-7
- Purl
- pkg:rpm/suse/ffmpeg-7&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed7.1.4-160000.3.1
Ecosystem specific
{
"binaries": [
{
"ffmpeg-7": "7.1.4-160000.3.1",
"libavcodec61": "7.1.4-160000.3.1",
"libavdevice61": "7.1.4-160000.3.1",
"libavfilter10": "7.1.4-160000.3.1",
"libavformat61": "7.1.4-160000.3.1",
"libavutil59": "7.1.4-160000.3.1",
"libpostproc58": "7.1.4-160000.3.1",
"libswresample5": "7.1.4-160000.3.1",
"libswscale8": "7.1.4-160000.3.1"
}
]
}
SUSE:Linux Enterprise Server for SAP applications 16.0 / ffmpeg-7
Package
- Name
- ffmpeg-7
- Purl
- pkg:rpm/suse/ffmpeg-7&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed7.1.4-160000.3.1
Ecosystem specific
{
"binaries": [
{
"ffmpeg-7": "7.1.4-160000.3.1",
"libavcodec61": "7.1.4-160000.3.1",
"libavdevice61": "7.1.4-160000.3.1",
"libavfilter10": "7.1.4-160000.3.1",
"libavformat61": "7.1.4-160000.3.1",
"libavutil59": "7.1.4-160000.3.1",
"libpostproc58": "7.1.4-160000.3.1",
"libswresample5": "7.1.4-160000.3.1",
"libswscale8": "7.1.4-160000.3.1"
}
]
}