CVE-2026-65705: FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filterframe() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.1.2 - Compensating control
Mitigate by not using filtergraph reinitialization disablement: avoid running ffmpeg with -reinit_filter 0 when using the vf_floodfill filter on dynamically sized video streams.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-65705?
CVE-2026-65705 has a severity rating of high, assigned a score of 7.8.
How do I fix CVE-2026-65705?
To remediate CVE-2026-65705, upgrade FFmpeg to version 8.1.3 or later.
What impact does CVE-2026-65705 have on my system?
CVE-2026-65705 can lead to heap memory corruption, potentially allowing attackers to execute arbitrary code on the affected system.
Which versions of FFmpeg are affected by CVE-2026-65705?
FFmpeg versions 3.4 through 8.1.2 are affected by CVE-2026-65705.
What is the nature of the vulnerability in CVE-2026-65705?
CVE-2026-65705 is an out-of-bounds write vulnerability in the vf_floodfill video filter.