FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core.
References
| Link | Resource |
|---|---|
| https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902 | Issue Tracking Patch |
| https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013 | Exploit Third Party Advisory |
| https://github.com/FFmpeg/FFmpeg | Product |
| https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225 | Product |
| https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c | Third Party Advisory |
Configurations
History
14 Oct 2026, 23:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902 - Issue Tracking, Patch | |
| References | () https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013 - Exploit, Third Party Advisory | |
| References | () https://github.com/FFmpeg/FFmpeg - Product | |
| References | () https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225 - Product | |
| References | () https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c - Third Party Advisory | |
| CPE | cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:* | |
| First Time |
Ffmpeg
Ffmpeg ffmpeg |
08 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-08 18:17
Updated : 2026-10-14 23:54
NVD link : CVE-2026-107696
Mitre link : CVE-2026-107696
CVE.ORG link : CVE-2026-107696
JSON object : View
Products Affected
ffmpeg
- ffmpeg
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')