Out-of-bounds Read in F5 Nginx Open Source

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code exe…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.