CVE detail
CVE-2026-64832
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 3
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
3 source links · newest first
- https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-cwww.vulncheck.com
No excerpt available.
Exploitwww.vulncheck.comJul 22, 2026, 6:17 PM - https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664code.ffmpeg.org
No excerpt available.
Patchcode.ffmpeg.orgJul 22, 2026, 6:17 PM - https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97code.ffmpeg.org
No excerpt available.
Patchcode.ffmpeg.orgJul 22, 2026, 6:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-64621CVSS 9.3 · Critical
FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the sel…
- CVE-2026-13713CVSS 6.2 · Medium
YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the parser value stack. In the bundled libsyck, when an an…
- CVE-2026-55132CVSS 7.8 · High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-50685CVSS 7.5 · High
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
- CVE-2026-50361CVSS 7.8 · High
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-55004CVSS 7.8 · High
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.