Medium severity · published Aug 11, 2026
CVE-2026-8158
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
The Signed Video Framework contained a buffer overflow issue
which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Axis File Player · Axis Communications AB
before 3.1.9.0 · source: vendor
SV
Signed Video Framework · Axis Communications AB
before 2.3.5 · source: vendor
SM
Signed media verifier · Axis Communications AB
before 1.0.2 · source: vendor