The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework…
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Axis Communications
- Product
- Signed Video Framework, Signed media verifier, Axis File Player
- CVSS v3.1
- 5.3 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weakness
- CWE-125
- Exposure class
- OT / ICS
- NVD status
- Received
Why it ranks 23 (Routine)
- CVSS v3.1 5.3 medium
- Product class: OT / ICS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-14918 on this site · NVD · CVE.org · Vulnpedia