CVE-2026-65703: FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdscparsetdsf() function fails to unreference the existing reference frame before calling avframegetbuffer(), causing tdscblit() and tdscyuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FFmpeg (TDSC video decoder)to a version that resolves this vulnerability.Fixed in 8.1.2Patch 8.1.2 - Upgrade
Upgrade
FFmpeg (TDSC video decoder)to a version that resolves this vulnerability.Fixed in 2.7Patch 2.7 - Compensating control
If you cannot upgrade immediately, do not process untrusted AVI files with FFmpeg’s TDSC video decoder; isolate or filter AVI inputs to prevent triggering the crafted AVI that changes frame dimensions across TDSF frames.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-65703?
The severity of CVE-2026-65703 is rated high with a score of 7.8.
How does CVE-2026-65703 affect FFmpeg?
CVE-2026-65703 affects FFmpeg by allowing remote attackers to exploit an out-of-bounds write vulnerability in the TDSC video decoder.
What are the potential impacts of CVE-2026-65703?
The potential impacts of CVE-2026-65703 include heap corruption and possible execution of arbitrary code.
How do I fix CVE-2026-65703?
To fix CVE-2026-65703, upgrade FFmpeg to a version beyond 8.1.2 that includes the security patches.
What versions of FFmpeg are affected by CVE-2026-65703?
FFmpeg versions 2.7 through 8.1.2 are affected by CVE-2026-65703.