{"schema":"vulnpedia.research/1","cve":"CVE-2026-75146","references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093","tags":["issue-tracking","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093"},{"source":"nvd","sourceId":"CVE-2026-75146","modified":"2026-08-31T20:37:35.877","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093"},{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093"}]},{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0"},{"source":"nvd","sourceId":"CVE-2026-75146","modified":"2026-08-31T20:37:35.877","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0"},{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0"}]},{"url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-08-19T16:28:19.356Z","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"},{"source":"nvd","sourceId":"CVE-2026-75146","modified":"2026-08-31T20:37:35.877","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"},{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-75146","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-75146"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519764","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519764"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-75146","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-75146"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75146","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75146"}]},{"source":"euvd","sourceId":"EUVD-2026-62583","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62583","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-62583","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-62583"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:ffmpeg.src","product":"ffmpeg.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"No mitigation is currently available for this flaw."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/ffmpeg?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json"}]},{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"No mitigation is currently available for this flaw."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-75146","modified":"2026-08-28T09:21:35+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-75146.json"}]}],"vendorCoverage":{"total":2,"shown":2,"omitted":0,"source":"redhat"}}