Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-13 | 2 | Disclosure2 |
| 2026-05-29 | 1 | General1 |
#Mageia em alerta? Vulnerabilidades no FFmpeg (CVE-2026-30997 e CVE-2026-40962) podem travar seu sistema com um simples arquivo de mídia. Saiba mais -> http://tinyurl.com/4d9xc2vk https://t.co/rWbm7rLhOs
Post summary
The tweet alerts users to two FFmpeg vulnerabilities that can crash Mageia systems with a simple media file, but does not provide PoC, exploit, patch, or active exploitation details.
CVE-2026-30997 Out-of-Bounds Read in FFmpeg v8.0.1 Causes Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30997 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
This notice announces CVE‑2026‑30997, an out‑of‑bounds read in FFmpeg v8.0.1 that leads to a denial‑of‑service condition, and directs readers to detailed vulnerability information and a notification link.
CVE-2026-30997 An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted inp… https://www.cve.org/CVERecord?id=CVE-2026-30997
Post summary
The tweet discloses an out-of-bounds read vulnerability in FFmpeg v8.0.1 that can cause a Denial of Service, without mentioning PoCs, exploits, patches, or active use.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ffmpeg | ffmpeg | - | - | - |