CVE-2026-14918: Medium severity vulnerability
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.
Event History
Frequently Asked Questions
Which deployments are affected?
Only applications using the Signed Video Framework tools to validate signed content are affected. The AXIS OS device signed video functionality is not affected.
What could exploitation cause?
The out-of-bounds read could cause the application using the affected validation tools to crash, resulting in a denial of service.
What does an attacker need to do to exploit this issue?
The issue is network-reachable and requires user interaction, according to the supplied CVSS vector. No privileges are required, but exploitation has high attack complexity.