CVE-2026-64833

Name of the Vulnerable Software and Affected Versions FFmpeg versions 0.7.1 through 8.1.2

Description An out-of-bounds read exists in the S/PDIF muxer. This occurs when a crafted DTS stream is supplied with a core size value larger than the actual packet length. The issue stems from a missing bounds check in the spdif header dts4() function, which allows unauthorized memory access beyond the packet buffer during S/PDIF re-muxing of a malicious DTS-HD audio stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.