Vulnerability · Published Apr 15, 2026 · Assigned by redhat
CVE-2026-6385Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser
Medium 6.5
In plain English
A medium-severity integer overflow in Lightspeed Core from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | ffmpeg | 7:5.1.9-0+deb12u1 | DEBIAN-CVE-2026-6385 |
| Debian:13 | ffmpeg | 7:7.1.4-0+deb13u1 | DEBIAN-CVE-2026-6385 |
| Debian:14 | ffmpeg | 7:8.1.1-1 | DEBIAN-CVE-2026-6385 |
| Ubuntu:25.10 | ffmpeg | no fix listed | UBUNTU-CVE-2026-6385 |
| Ubuntu:26.10 | ffmpeg | no fix listed | UBUNTU-CVE-2026-6385 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Lightspeed Core | see references |
| Red Hat | Red Hat AI Inference Server | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | see references |
| Red Hat | Red Hat OpenShift AI (RHOAI) | see references |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
- https://access.redhat.com/security/cve/CVE-2026-6385 vdb-entry, x_refsource_REDHAT
- RHBZ#2458764 issue-tracking, x_refsource_REDHAT