{"id":"CVE-2026-30754","title":"A memory corruption vulnerability exists in FFmpeg before 8.1","summary":"A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC str…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T16:17:02.720","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-30754","references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20746","label":"cve@mitre.org"},{"url":"https://gist.github.com/momo-trip/4cddf2c9e15600873de55259dac6b0e6","label":"cve@mitre.org"},{"url":"https://github.com/momo-trip/poc_ffmpeg","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T15:16:35.323659Z"},"epss":0.00347,"epssPercentile":0.28273,"ingestedAt":"2026-09-08T21:11:12.370Z","slug":"CVE-2026-30754","body":"## Overview\n\nA memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using AddressSanitizer.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201596,"id":"CVE-2026-30754","ts":1789399511771,"field":"cvss","old":null,"new":"8.8"},{"seq":201595,"id":"CVE-2026-30754","ts":1789399511771,"field":"severity","old":"none","new":"high"},{"seq":200328,"id":"CVE-2026-30754","ts":1789397087233,"field":"cvss","old":"8.8","new":null},{"seq":200327,"id":"CVE-2026-30754","ts":1789397087233,"field":"severity","old":"high","new":"none"},{"seq":198252,"id":"CVE-2026-30754","ts":1789391750187,"field":"cvss","old":null,"new":"8.8"},{"seq":198251,"id":"CVE-2026-30754","ts":1789391750187,"field":"severity","old":"none","new":"high"},{"seq":196045,"id":"CVE-2026-30754","ts":1789383400277,"field":"cvss","old":"8.8","new":null},{"seq":196044,"id":"CVE-2026-30754","ts":1789383400277,"field":"severity","old":"high","new":"none"},{"seq":194974,"id":"CVE-2026-30754","ts":1789380301320,"field":"cvss","old":null,"new":"8.8"},{"seq":194973,"id":"CVE-2026-30754","ts":1789380301320,"field":"severity","old":"none","new":"high"},{"seq":193761,"id":"CVE-2026-30754","ts":1789378269793,"field":"cvss","old":"8.8","new":null},{"seq":193760,"id":"CVE-2026-30754","ts":1789378269793,"field":"severity","old":"high","new":"none"},{"seq":192548,"id":"CVE-2026-30754","ts":1789376234177,"field":"cvss","old":null,"new":"8.8"},{"seq":192547,"id":"CVE-2026-30754","ts":1789376234177,"field":"severity","old":"none","new":"high"},{"seq":191335,"id":"CVE-2026-30754","ts":1789373127478,"field":"cvss","old":"8.8","new":null},{"seq":191334,"id":"CVE-2026-30754","ts":1789373127478,"field":"severity","old":"high","new":"none"},{"seq":190120,"id":"CVE-2026-30754","ts":1789369121924,"field":"cvss","old":null,"new":"8.8"},{"seq":190119,"id":"CVE-2026-30754","ts":1789369121924,"field":"severity","old":"none","new":"high"},{"seq":188907,"id":"CVE-2026-30754","ts":1789368039250,"field":"cvss","old":"8.8","new":null},{"seq":188906,"id":"CVE-2026-30754","ts":1789368039250,"field":"severity","old":"high","new":"none"},{"seq":187690,"id":"CVE-2026-30754","ts":1789364997324,"field":"cvss","old":null,"new":"8.8"},{"seq":187689,"id":"CVE-2026-30754","ts":1789364997324,"field":"severity","old":"none","new":"high"},{"seq":186477,"id":"CVE-2026-30754","ts":1789363003305,"field":"cvss","old":"8.8","new":null},{"seq":186476,"id":"CVE-2026-30754","ts":1789363003305,"field":"severity","old":"high","new":"none"},{"seq":185263,"id":"CVE-2026-30754","ts":1789360970533,"field":"cvss","old":null,"new":"8.8"},{"seq":185262,"id":"CVE-2026-30754","ts":1789360970533,"field":"severity","old":"none","new":"high"},{"seq":184050,"id":"CVE-2026-30754","ts":1789357944293,"field":"cvss","old":"8.8","new":null},{"seq":184049,"id":"CVE-2026-30754","ts":1789357944293,"field":"severity","old":"high","new":"none"},{"seq":182302,"id":"CVE-2026-30754","ts":1789354098716,"field":"cvss","old":null,"new":"8.8"},{"seq":182301,"id":"CVE-2026-30754","ts":1789354098716,"field":"severity","old":"none","new":"high"},{"seq":181095,"id":"CVE-2026-30754","ts":1789352944424,"field":"cvss","old":"8.8","new":null},{"seq":181094,"id":"CVE-2026-30754","ts":1789352944424,"field":"severity","old":"high","new":"none"},{"seq":179888,"id":"CVE-2026-30754","ts":1789350002070,"field":"cvss","old":null,"new":"8.8"},{"seq":179887,"id":"CVE-2026-30754","ts":1789350002070,"field":"severity","old":"none","new":"high"},{"seq":178681,"id":"CVE-2026-30754","ts":1789347815237,"field":"cvss","old":"8.8","new":null},{"seq":178680,"id":"CVE-2026-30754","ts":1789347815237,"field":"severity","old":"high","new":"none"},{"seq":177474,"id":"CVE-2026-30754","ts":1789346182507,"field":"cvss","old":null,"new":"8.8"},{"seq":177473,"id":"CVE-2026-30754","ts":1789346182507,"field":"severity","old":"none","new":"high"},{"seq":176267,"id":"CVE-2026-30754","ts":1789342752865,"field":"cvss","old":"8.8","new":null},{"seq":176266,"id":"CVE-2026-30754","ts":1789342752865,"field":"severity","old":"high","new":"none"},{"seq":176051,"id":"CVE-2026-30754","ts":1789342359377,"field":"cvss","old":null,"new":"8.8"},{"seq":176050,"id":"CVE-2026-30754","ts":1789342359377,"field":"severity","old":"none","new":"high"},{"seq":175591,"id":"CVE-2026-30754","ts":1789338390867,"field":"cvss","old":"8.8","new":null},{"seq":175590,"id":"CVE-2026-30754","ts":1789338390867,"field":"severity","old":"high","new":"none"},{"seq":174386,"id":"CVE-2026-30754","ts":1789334605577,"field":"cvss","old":null,"new":"8.8"},{"seq":174385,"id":"CVE-2026-30754","ts":1789334605577,"field":"severity","old":"none","new":"high"},{"seq":173181,"id":"CVE-2026-30754","ts":1789333209426,"field":"cvss","old":"8.8","new":null},{"seq":173180,"id":"CVE-2026-30754","ts":1789333209426,"field":"severity","old":"high","new":"none"},{"seq":171995,"id":"CVE-2026-30754","ts":1789330885315,"field":"cvss","old":null,"new":"8.8"},{"seq":171994,"id":"CVE-2026-30754","ts":1789330885315,"field":"severity","old":"none","new":"high"}]}