Bug 2450785 (CVE-2026-27784)

Summary: CVE-2026-27784 NGINX: NGINX: Denial of Service due to memory corruption via crafted MP4 file
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in NGINX Open Source, specifically within the ngx_http_mp4_module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resulting in a Denial of Service (DoS). This issue affects 32-bit NGINX Open Source when built with the ngx_http_mp4_module and the mp4 directive is used.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2450840    
Bug Blocks:    

Description OSIDB Bzimport 2026-03-24 15:02:30 UTC
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Comment 2 errata-xmlrpc 2026-04-07 18:36:48 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:6906 https://access.redhat.com/errata/RHSA-2026:6906

Comment 3 errata-xmlrpc 2026-04-07 20:37:39 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:6907 https://access.redhat.com/errata/RHSA-2026:6907

Comment 4 errata-xmlrpc 2026-04-07 21:36:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:6923 https://access.redhat.com/errata/RHSA-2026:6923

Comment 5 errata-xmlrpc 2026-04-08 08:02:29 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:7002 https://access.redhat.com/errata/RHSA-2026:7002

Comment 6 errata-xmlrpc 2026-04-09 18:53:47 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:7343 https://access.redhat.com/errata/RHSA-2026:7343

Comment 11 errata-xmlrpc 2026-05-05 08:35:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:13634 https://access.redhat.com/errata/RHSA-2026:13634

Comment 12 errata-xmlrpc 2026-05-05 10:26:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:13680 https://access.redhat.com/errata/RHSA-2026:13680

Comment 13 errata-xmlrpc 2026-05-05 18:06:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:13839 https://access.redhat.com/errata/RHSA-2026:13839

Comment 14 errata-xmlrpc 2026-05-07 19:01:55 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:14836 https://access.redhat.com/errata/RHSA-2026:14836

Comment 15 errata-xmlrpc 2026-05-11 08:07:23 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:15942 https://access.redhat.com/errata/RHSA-2026:15942

Comment 16 errata-xmlrpc 2026-05-11 08:42:16 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:15943 https://access.redhat.com/errata/RHSA-2026:15943

Comment 17 errata-xmlrpc 2026-05-11 09:33:17 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:15945 https://access.redhat.com/errata/RHSA-2026:15945

Comment 18 errata-xmlrpc 2026-05-11 10:49:45 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:15966 https://access.redhat.com/errata/RHSA-2026:15966