Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-64832 Double-Free Vulnerability in FFmpeg NVIDIA NVDEC Hardware Decoder Versions 4.4-8.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64832
Post summary
The text discloses a double‑free vulnerability (CVE-2026-64832) in FFmpeg NVIDIA NVDEC hardware decoder across versions 4.4‑8.1.2, with no exploitation or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ffmpeg | ffmpeg | - | - | - |