CVE-2026-18393 - A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution. - 漏洞详情

漏洞编号：CVE-2026-18393

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-18393

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-787

发布/更新时间：2026-08-28 / 2026-08-28

漏洞描述

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond
the bounds of a heap-allocated buffer when processing crafted TDSC cursor
data. A remote attacker could exploit this by supplying a specially crafted
video file, potentially leading to a denial of service or arbitrary code
execution.

漏洞描述

相关链接

相关漏洞