Advisories

Important: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg

Security scans report the following CVEs, all of which have IMPORTANT impact: - CVE-2026-64832 - CVE-2026-64833 - CVE-2026-70628 - CVE-2026-75142 - CVE-2026-75144 - CVE-2026-75146

Read at Red Hat Security Advisories

Vendor

Red Hat

Product

Red Hat Enterprise Linux, ImageMagick / Ghostscript / FFmpeg / libxml2

Exposure class

Operating system

• Red Hat Security Advisories (access.redhat.com)
• CVE-2026-64832 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-64833 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-70628 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-75142 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-75144 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 19 Aug 2026

   FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c).

   CVSS 8.1 CVE-2026-75146
2. 10
   CVE NVD 19 Aug 2026

   FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows…

   CVSS 7.8 CVE-2026-75144
3. 10
   CVE NVD 19 Aug 2026

   FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c).

   CVSS 7.8 CVE-2026-75142
4. 10
   CVE NVD 6 Aug 2026

   FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in…

   CVSS 7.8 CVE-2026-70628
5. 10
   CVE NVD 22 Jul 2026

   FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond…

   CVSS 7.1 CVE-2026-64833
6. 10
   CVE NVD 22 Jul 2026

   FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows…

   CVSS 8.8 CVE-2026-64832 NVIDIA