{"history":[{"alert":0,"cve":"CVE-2026-14918","id":23224,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00172, \"percentile\": 0.06692}"},{"alert":0,"cve":"CVE-2026-14918","id":21107,"kind":"epss","observed_at":1794392402,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00172, \"percentile\": 0.0667}"},{"alert":1,"cve":"CVE-2026-14918","id":21075,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"Signed Video Framework\", \"vendor\": \"Axis Communications AB\", \"versions\": [{\"lessThan\": \"2.3.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Signed media verifier\", \"vendor\": \"Axis Communications AB\", \"versions\": [{\"lessThan\": \"1.0.3\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Axis File Player\", \"vendor\": \"Axis Communications AB\", \"versions\": [{\"lessThan\": \"3.1.10.0\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Martin Holecek\"}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.\"}], \"value\": \"The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T05:26:28.528Z\", \"orgId\": \"f2daf9a0-02c2-4b83-a01d-63b3b304b807\", \"shortName\": \"Axis\"}, \"references\": [{\"url\": \"https://www.axis.com/dam/public/3b/4f/06/cve-2026-14918pdf-en-US-561258.pdf\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"f2daf9a0-02c2-4b83-a01d-63b3b304b807\", \"assignerShortName\": \"Axis\", \"cveId\": \"CVE-2026-14918\", \"datePublished\": \"2026-11-10T05:26:28.528Z\", \"dateReserved\": \"2026-07-07T07:47:39.336Z\", \"dateUpdated\": \"2026-11-10T05:26:28.528Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"Signed Video Framework","vendor":"Axis Communications AB","versions":[{"lessThan":"2.3.7","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Signed media verifier","vendor":"Axis Communications AB","versions":[{"lessThan":"1.0.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Axis File Player","vendor":"Axis Communications AB","versions":[{"lessThan":"3.1.10.0","status":"affected","version":"0","versionType":"semver"}]}],"cna":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Signed Video Framework","vendor":"Axis Communications AB","versions":[{"lessThan":"2.3.7","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Signed media verifier","vendor":"Axis Communications AB","versions":[{"lessThan":"1.0.3","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Axis File Player","vendor":"Axis Communications AB","versions":[{"lessThan":"3.1.10.0","status":"affected","version":"0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Martin Holecek"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected."}],"value":"The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125: Out-of-bounds Read","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-10T05:26:28.528Z","orgId":"f2daf9a0-02c2-4b83-a01d-63b3b304b807","shortName":"Axis"},"references":[{"url":"https://www.axis.com/dam/public/3b/4f/06/cve-2026-14918pdf-en-US-561258.pdf"}],"x_generator":{"engine":"Vulnogram 1.0.5"}}},"cveMetadata":{"assignerOrgId":"f2daf9a0-02c2-4b83-a01d-63b3b304b807","assignerShortName":"Axis","cveId":"CVE-2026-14918","datePublished":"2026-11-10T05:26:28.528Z","dateReserved":"2026-07-07T07:47:39.336Z","dateUpdated":"2026-11-10T05:26:28.528Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-14918","description":"The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.","epss":{"date":"2026-11-12","epss":0.00172,"percentile":0.06692},"epss_checked":1794522003,"first_seen":1794376891,"kev":null,"kev_checked":1794522003,"products":"Axis Communications AB Signed Video Framework, Axis Communications AB Signed media verifier, Axis Communications AB Axis File Player","references":["https://www.axis.com/dam/public/3b/4f/06/cve-2026-14918pdf-en-US-561258.pdf"],"score":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","provider":"Axis","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"CVE-2026-14918","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://cvefeed.io/vuln/detail/CVE-2026-14918","id":370,"publisher":"CVE Feed","title":"CVE-2026-14918 - AXIS Signed Video Framework Out-of-Bounds Read Vulnerability"}]}