CVE-2026-18393

Name of the Vulnerable Software and Affected Versions FFmpeg (affected versions not specified)

Description A flaw exists in the tdsc load cursor() function that allows writing beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker can exploit this by providing a specially crafted video file, which may result in a denial of service or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.