CVE-2026-40962

Description

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22348