RHSA-2026:74089: CVEs fixed (Red Hat)

RHSA-2026:74089 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-64834 HIGH 7.5 UPGRADE FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libav
• CVE-2026-64830 HIGH 8.8 UPGRADE FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer

Applies to

• RHEL AI 3.0 for RHEL 9 · fixed in ffmpeg-6.1.6-9.el9ai

← Back to latest CVEs