CVE-2026-75141

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c

Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent, leading to a NAL unit count overflow. A specially crafted HEVC input file can trigger this overflow during the muxing process.

Recommendations Update FFmpeg to the version containing commit acf5d7c or later.