🛡️ CLEANSTART-2026-XE32069 — ffmpeg (CVE-2017-14058 +58 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a ...

Multiple security vulnerabilities affect the ffmpeg package. Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps. See references for individual vulnerability details.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality high, integrity high, availability high.

CVSS metrics in full

The score comes from this vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network — reachable from anywhere that can route to the service.
Attack complexity: Low — the attack works reliably, with no preparation.
Privileges required: None — an unauthenticated stranger can try it.
User interaction: None — nobody has to be tricked into anything.
Scope: Unchanged — the damage stays inside the vulnerable component.
Confidentiality impact: High — total loss, or loss the attacker controls.
Integrity impact: High — total loss, or loss the attacker controls.
Availability impact: High — total loss, or loss the attacker controls.

Affected software

CLEANSTART-2026-XE32069 is recorded against 1 package.

ffmpeg (fixed in 6.1-r0)

Timeline and source

Published on 6 February 2026 and last revised on 23 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Other advisories for this package

ffmpeg has other advisories on record. If you are patching this one, these are worth checking on the same host:

ROOT-OS-UBUNTU-2204-CVE-2024-7055 (5.0 Medium, published 11 Aug 2026)
RHSA-2026:52833 (published 11 Aug 2026)
RHSA-2026:52832 (published 11 Aug 2026)
OESA-2026-3285 (8.0 High, published 7 Aug 2026)
ECHO-d1bb-4d4f-3ea6 (published 7 Aug 2026)
ECHO-2c71-7b73-53dd (published 7 Aug 2026)
OESA-2026-3284 (8.0 High, published 7 Aug 2026)
ECHO-6986-2e97-593f (published 7 Aug 2026)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2026-02-06

Updated 2026-08-20

Modified 2026-06-23

Fix URL N/A

Affected Packages

Software	From version	Fixed in
ffmpeg	—	6.1-r0

References

ADVISORY https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XE32069

WEB https://osv.dev/vulnerability/CVE-2017-14058

WEB https://osv.dev/vulnerability/CVE-2017-14225

WEB https://osv.dev/vulnerability/CVE-2018-10001

WEB https://osv.dev/vulnerability/CVE-2018-12458

WEB https://osv.dev/vulnerability/CVE-2018-12459

WEB https://osv.dev/vulnerability/CVE-2018-12460

WEB https://osv.dev/vulnerability/CVE-2018-13300

WEB https://osv.dev/vulnerability/CVE-2018-13301

WEB https://osv.dev/vulnerability/CVE-2018-13302

WEB https://osv.dev/vulnerability/CVE-2018-13303

WEB https://osv.dev/vulnerability/CVE-2018-13304

WEB https://osv.dev/vulnerability/CVE-2018-13305

WEB https://osv.dev/vulnerability/CVE-2018-14394

WEB https://osv.dev/vulnerability/CVE-2018-14395

WEB https://osv.dev/vulnerability/CVE-2018-15822

WEB https://osv.dev/vulnerability/CVE-2018-1999010

WEB https://osv.dev/vulnerability/CVE-2018-1999011

WEB https://osv.dev/vulnerability/CVE-2018-1999012

WEB https://osv.dev/vulnerability/CVE-2018-1999013

WEB https://osv.dev/vulnerability/CVE-2018-1999014

WEB https://osv.dev/vulnerability/CVE-2018-1999015

WEB https://osv.dev/vulnerability/CVE-2018-6912

WEB https://osv.dev/vulnerability/CVE-2018-7557

WEB https://osv.dev/vulnerability/CVE-2018-7751

WEB https://osv.dev/vulnerability/CVE-2018-7757

WEB https://osv.dev/vulnerability/CVE-2018-9841

WEB https://osv.dev/vulnerability/CVE-2019-1000016

WEB https://osv.dev/vulnerability/CVE-2019-11338

WEB https://osv.dev/vulnerability/CVE-2019-11339

WEB https://osv.dev/vulnerability/CVE-2019-12730

WEB https://osv.dev/vulnerability/CVE-2019-17539

WEB https://osv.dev/vulnerability/CVE-2019-17542

WEB https://osv.dev/vulnerability/CVE-2019-9718

WEB https://osv.dev/vulnerability/CVE-2019-9721

WEB https://osv.dev/vulnerability/CVE-2020-12284

WEB https://osv.dev/vulnerability/CVE-2020-13904

WEB https://osv.dev/vulnerability/CVE-2020-14212

WEB https://osv.dev/vulnerability/CVE-2020-20446

WEB https://osv.dev/vulnerability/CVE-2020-20450

WEB https://osv.dev/vulnerability/CVE-2020-20453

WEB https://osv.dev/vulnerability/CVE-2020-21041

WEB https://osv.dev/vulnerability/CVE-2020-22015

WEB https://osv.dev/vulnerability/CVE-2020-22019

WEB https://osv.dev/vulnerability/CVE-2020-22021

WEB https://osv.dev/vulnerability/CVE-2020-22037

WEB https://osv.dev/vulnerability/CVE-2020-22038

WEB https://osv.dev/vulnerability/CVE-2020-22042

WEB https://osv.dev/vulnerability/CVE-2020-24020

WEB https://osv.dev/vulnerability/CVE-2020-35964

WEB https://osv.dev/vulnerability/CVE-2020-35965

WEB https://osv.dev/vulnerability/CVE-2021-30123

WEB https://osv.dev/vulnerability/CVE-2021-33815

WEB https://osv.dev/vulnerability/CVE-2021-38114

WEB https://osv.dev/vulnerability/CVE-2021-38171

WEB https://osv.dev/vulnerability/CVE-2021-38291

WEB https://osv.dev/vulnerability/CVE-2022-3965

WEB https://osv.dev/vulnerability/CVE-2023-46407

WEB https://osv.dev/vulnerability/CVE-2023-47342

WEB https://osv.dev/vulnerability/CVE-2023-47470

WEB https://nvd.nist.gov/vuln/detail/CVE-2017-14058

WEB https://nvd.nist.gov/vuln/detail/CVE-2017-14225

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-10001

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-12458

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-12459

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-12460

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13300

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13301

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13302

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13303

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13304

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-13305

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-14394

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-14395

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-15822

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999010

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999011

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999012

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999013

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999014

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-1999015

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-6912

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-7557

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-7751

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-7757

WEB https://nvd.nist.gov/vuln/detail/CVE-2018-9841

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-1000016

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-11338

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-11339

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-12730

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-17539

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-17542

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-9718

WEB https://nvd.nist.gov/vuln/detail/CVE-2019-9721

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-12284

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-13904

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-14212

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-20446

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-20450

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-20453

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-21041

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22015

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22019

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22021

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22037

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22038

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-22042

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-24020

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-35964

WEB https://nvd.nist.gov/vuln/detail/CVE-2020-35965

WEB https://nvd.nist.gov/vuln/detail/CVE-2021-30123

WEB https://nvd.nist.gov/vuln/detail/CVE-2021-33815

WEB https://nvd.nist.gov/vuln/detail/CVE-2021-38114

WEB https://nvd.nist.gov/vuln/detail/CVE-2021-38171

WEB https://nvd.nist.gov/vuln/detail/CVE-2021-38291

WEB https://nvd.nist.gov/vuln/detail/CVE-2022-3965

WEB https://nvd.nist.gov/vuln/detail/CVE-2023-46407

WEB https://nvd.nist.gov/vuln/detail/CVE-2023-47342

WEB https://nvd.nist.gov/vuln/detail/CVE-2023-47470

🔗 NVD 🔗 Mitre

Similar Threats

Free Vulnerability Check

Is your site affected by CLEANSTART-2026-XE32069?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against CLEANSTART-2026-XE32069 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ CLEANSTART-2026-XE32069 — ffmpeg (CVE-2017-14058 +58 more)

Description

How this vulnerability can be exploited

CVSS metrics in full

Affected software

Timeline and source

References

Other advisories for this package

Is your site affected by CLEANSTART-2026-XE32069?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe