CVE-2026-90816 | FFmpeg 8.0.x Duration Parser libavformat/hlsproto.c parse_playlist duration/target_duration denial of service (64fafd63f0b4)

September 13, 2026 Yanac

A vulnerability was found in FFmpeg 8.0.x. It has been classified as problematic. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service.

This vulnerability is reported as CVE-2026-90816. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More