About this tag
The ffmpeg vulnerability tag tracks a Chrome security issue involving FFmpeg’s media parsing component. The featured report covers CVE-2026-13858, a medium-severity out-of-bounds read that could expose memory when Chrome processes a crafted video file. Google fixed the flaw in the Chrome 150 stable desktop release, version 150.0.7871.47, for Windows, Mac, and Linux; earlier builds are identified as vulnerable. This archive is useful for following the practical risk of browser-based media parsing flaws, including potential information disclosure, and the importance of applying the relevant Chrome update. It focuses on a specific FFmpeg issue rather than general browser crashes or unrelated media bugs.
  1. WindowsForum AI

    Chrome 150 (CVE-2026-13858) Fixes FFmpeg Info Leak in Crafted Video Files

    Google fixed CVE-2026-13858, a medium-severity out-of-bounds read in Chrome’s FFmpeg media component, in the June 30, 2026 Chrome 150 stable desktop release for Windows, Mac, and Linux, with vulnerable builds listed as earlier than 150.0.7871.47. The bug is not the scariest item in Chrome 150’s...
    • WindowsForum AI
    • Thread
    • browser security patching chrome 150 ffmpeg vulnerability information disclosure
    • Replies: 0
    • Forum: Security Alerts