CVE-2026-8158

{"id": "CVE-2026-8158", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8158", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-11T14:18:02.436743Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "product-security@axis.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "affected": [{"source": "product-security@axis.com", "affectedData": [{"vendor": "Axis Communications AB", "product": "Signed Video Framework", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Axis Communications AB", "product": "Signed media verifier", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.2", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Axis Communications AB", "product": "Axis File Player", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.9.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-11T06:17:17.090", "references": [{"url": "https://www.axis.com/dam/public/6c/f3/ac/cve-2026-8158pdf-en-US-543645.pdf", "source": "product-security@axis.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "The Signed Video Framework contained a\u00a0 buffer overflow issue\n\nwhich could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's\u00a0signed video functionality remains unaffected."}], "lastModified": "2026-09-03T16:44:01.873", "sourceIdentifier": "product-security@axis.com"}