[wrynose][oe-core][PATCH 03/10] ffmpeg: set CVE_STATUS for CVE-2026-64832
flat view
From: <hidden>
Date: 2026-09-10 13:34:14
Subsystem:
the rest · Maintainer:
Linus Torvalds
From: Bhavesh R Maheshwari <redacted> Analysis: - CVE-2026-64832 affects NVIDIA NVDEC hardware acceleration.[1] - The ffmpeg recipe does not enable or build NVIDIA NVDEC hardware acceleration by default. - Hence CVE is not applicable. Reference: [1] https://nvd.nist.gov/vuln/detail/CVE-2026-64832 Signed-off-by: Bhavesh R Maheshwari <redacted> --- meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb | 1 + 1 file changed, 1 insertion(+)
diff --git a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb
index af05ab4af9..68f09c2bc4 100644
--- a/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb
+++ b/meta/recipes-multimedia/ffmpeg/ffmpeg_8.0.3.bb@@ -187,3 +187,4 @@ CVE_STATUS[CVE-2025-59730] = "fixed-version: this CVE are fixed since v8.0" CVE_STATUS[CVE-2026-8461] = "cpe-stable-backport: this CVE are fixed since v8.0.3" CVE_STATUS[CVE-2026-40962] = "cpe-stable-backport: this CVE are fixed since v8.0.2" CVE_STATUS[CVE-2026-64831] = "not-applicable-config: Vulkan HEVC hardware acceleration is not enabled or built by this recipe." +CVE_STATUS[CVE-2026-64832] = "not-applicable-config: NVIDIA NVDEC hardware acceleration is not enabled or built by this recipe."
--
2.43.0