{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-6385 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-6385 is a medium-severity vulnerability in Red Hat Lightspeed Core, published on 15 Apr 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2026-6385 and fix it if it is affected.\n\nWhat it is: CVE-2026-6385 is a medium-severity vulnerability in Red Hat Lightspeed Core, published on 15 Apr 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2026-6385 in the wild and no public exploit code.\n\nAffected product: Red Hat Lightspeed Core. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-6385/ (Markdown: https://insights.sbomify.com/CVE-2026-6385/index.md)","id":"CVE-2026-6385","markdown":"https://insights.sbomify.com/CVE-2026-6385/index.md","name":"CVE-2026-6385","record":{"aliases":["DEBIAN-CVE-2026-6385","ECHO-5b52-e7e7-a6c7","GHSA-q22x-99q7-fr6w","UBUNTU-CVE-2026-6385"],"analysis":{"component_type":"library","fix_type":"patch","impacts":["denial_of_service","code_execution"],"network_reachable":"yes","non_default_config":false,"product_category":"FFmpeg media library","requires_auth":"none","summary":"Remote attackers can cause denial of service or execute arbitrary code via a crafted media file exploiting an integer overflow in FFmpeg's DVD subtitle parser.","user_interaction":"required","vuln_class":"integer_overflow"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"redhat","cpe":[],"cvss":{"score":6.5,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-190","name":"Integer Overflow or Wraparound"}],"description":"A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Integer overflow in Lightspeed Core","id":"CVE-2026-6385","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"integer_overflow","year":"2026"},"n_packages":0,"n_references":2,"next":{"headline":"Missing large page handling in pmap_pkru_update_range()","id":"CVE-2026-6386"},"packages":[],"prev":{"headline":"Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing","id":"CVE-2026-6384"},"products":["Lightspeed Core","Red Hat AI Inference Server","Red Hat Enterprise Linux AI (RHEL AI) 3","Red Hat OpenShift AI (RHOAI)"],"published":"2026-04-15","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-04-15","vendors":["Red Hat"]},"summary":"Remote attackers can cause denial of service or execute arbitrary code via a crafted media file exploiting an integer overflow in FFmpeg's DVD subtitle parser.","url":"https://insights.sbomify.com/CVE-2026-6385/"}