Vulnerability in FFmpeg

[ Description ]Official description

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.

[ Fixes ]Fixes and patches

• Patch on code.ffmpeg.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
• Patch on code.ffmpeg.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ Advisories ]Government CERT advisories

• BSI CERT-Bund8 Oct 2026WID-SEC-2026-3820

  ffmpeg: Multiple vulnerabilities Translated from German

  CVE-2026-107675CVE-2026-107697CVE-2026-107676+6 more CVEs

[ References ]References

• code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778ePatch
• code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592Issue TrackingPatch
• ffmpeg.orgProduct
• github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/dashdec.cProduct
• github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/avstring.cProduct
• www.vulncheck.com/advisories/ffmpeg-through-9.0.2-dash-demuxer-infinite-loop-via-empty-…Third Party Advisory