{"schema":"vulnpedia.research/1","cve":"CVE-2026-70628","references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","tags":["issue-tracking","Issue Tracking","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897"},{"source":"nvd","sourceId":"CVE-2026-70628","modified":"2026-09-01T15:36:28.407","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897"},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897"}]},{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","tags":["related","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c"},{"source":"nvd","sourceId":"CVE-2026-70628","modified":"2026-09-01T15:36:28.407","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c"},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c"}]},{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","tags":["patch","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30"},{"source":"nvd","sourceId":"CVE-2026-70628","modified":"2026-09-01T15:36:28.407","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30"},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30"}]},{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","tags":["patch","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506"},{"source":"nvd","sourceId":"CVE-2026-70628","modified":"2026-09-01T15:36:28.407","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506"},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506"}]},{"url":"https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file","tags":["third-party-advisory","Patch","Third Party Advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-14T16:51:31.502Z","url":"https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"},{"source":"nvd","sourceId":"CVE-2026-70628","modified":"2026-09-01T15:36:28.407","url":"https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-70628","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-70628"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2512243","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2512243"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70628","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-70628"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628"}]},{"source":"euvd","sourceId":"EUVD-2026-54160","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54160","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-54160","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54160"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:ffmpeg.src","product":"ffmpeg.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/ffmpeg?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]},{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, avoid processing untrusted WTV (Windows Recorded TV Show) files, especially those containing DVB subtitles. Exercise caution when handling multimedia files from unknown or suspicious sources."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-70628","modified":"2026-08-19T16:59:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-70628.json"}]}],"vendorCoverage":{"total":8,"shown":8,"omitted":0,"source":"redhat"}}