[SECURITY] [DLA 4828-1] gst-plugins-base1.0 security update

Debian LTS Advisory DLA-4828-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 08, 2026 https://wiki.debian.org/LTS Package : gst-plugins-base1.0 Version : 1.22.0-3+deb12u7 CVE ID : CVE-2026-18297 CVE-2026-85150 Multiple vulnerabilities has been...

Astra Linux – Vulnerability in faad2

There is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impacts, as the SM array is mishandled...

CLEANSTART-2023-WW67500 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2

Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...

CLEANSTART-2023-DB74273 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2

Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...

CLEANSTART-2023-NE75380 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2

Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...

CLEANSTART-2023-VR99573 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2

Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...

CLEANSTART-2023-LH87514 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2

Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

FFmpeg ADX Decoder Disclosure DoS

The vulnerability of the ADX audio decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, cause service failures, or execute arbitrary code...

FFmpeg TY demultiplexer audio decoder Memory Corruption Privilege Escalation

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to corrupt memory, cause system failures, or execute arbitrary code...

CVE-2026-57173

vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the inputaudio handling path for /v1/chat/completions calls AudioMediaIO.loadbytes or AudioMediaIO.loadfile without passing VLLMMAXAUDIODECODEDURATIONS to the shared audio decoder. An unauthenticated client can...

Astra Linux – Vulnerability in faad2

A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. This vulnerability causes a segmentation fault and results in the crash of the application, leading to a denial of service. This occurs because the handling of adding t...

Astra Linux – Vulnerability in ffmpeg5

A flaw was discovered in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services a...

Astra Linux – Vulnerability in faad2

An invalid memory address dereference was discovered in the sbrprocesschannel function of libfaad/sbrdec.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. This vulnerability causes a segmentation fault and results in the application crashing, leading to a denial of service...

ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...

ANT-2026-N0ZPQQQ6 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-N0ZPQQQ6: The ASAN report describes a real, plausible...

ANT-2026-8E67XSC7 · ffmpeg · heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8E67XSC7: Heap-buffer-overflow read in FFmpeg ADPCM...

UBUNTU-CVE-2026-73141

GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3552-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3552-1 advisory. - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-66039: MACE6 Audio...

CVE-2026-73141

A flaw was found in svxlink's audio decoders. A variable-length array on the stack is sized using an attacker-controlled encoded-frame length field received over the network. By sending a frame with an excessively large length value, a remote attacker can exhaust the stack, resulting in a denial ...