CVE-2026-75143

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1c10bcc

Description A heap buffer overflow exists in the RIST protocol reader within libavformat/librist.c. The function librist read() fails to respect its size argument, copying the entire received payload length into the destination buffer. This leads to an overflow when the payload size exceeds the buffer capacity. The issue is accessible via the async:rist:// URL scheme, where the async wrapper provides a buffer smaller than the incoming payload. A remote RIST sender can trigger this condition by sending a packet with a payload that exceeds the caller buffer size.

Recommendations Update FFmpeg to the version containing commit 1c10bcc or later.