CVE-2026-14918 · Infrastructure
NO FIX YET
The Signed Video Framework has an out-of-bounds read that can crash an application using it while it validates signed content. The sources say the issue affects only the tools that validate signed video, and that the AXIS OS device's signed video functionality is unaffected.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only applications that use the Signed Video Framework to validate signed video content are described as affected, and the sources say the device's own signed video functionality is unaffected. The sources do not name the specific validation tools or versions involved.
Not affected if device-signed-video-only
Who cares axis-os, signed-video-framework
Unknown from the sources.
No fix yet, per the sources.
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.