PJSIP 2.17 AVI Player Heap Buffer Overflow

PJSIP version 2.17 and earlier contains a heap-based out-of-bounds write in its AVI player when a crafted AVI chunk length exceeds the frame buffer capacity. The proof of concept generates a malformed AVI file and invokes a local test harness to demonstrate the crash...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value for super inde...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

Medium: gstreamer-plugins-good

Issue Overview: A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size o...

Amazon Linux 2 : gstreamer-plugins-good (ALAS-2026-4023)

The version of gstreamer-plugins-good installed on the remote host is prior to 0.10.31-20. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4023 advisory. A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur...

Astra Linux – vulnerability in ffmpeg

A use-after-free vulnerability was found in FFmpeg’s RASC video decoder. The decodemove function initializes a read pointer into a decompressed buffer; however, subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by...

Astra Linux – vulnerability in ffmpeg

A use-after-free in the mpegmuxwritepacket function within libavformat/mpegenc.c in FFmpeg 4.2 can lead to a denial of service DOS by using a specially crafted AVI file...

Astra Linux – vulnerability in ffmpeg, ffmpeg5

FFmpeg n6.1.1 contains a vulnerability in the AVI demuxer within the libavformat library; this vulnerability may lead to an integer overflow, potentially resulting in a denial-of-service DoS condition...

CLEANSTART-2026-UF43430 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux

Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...

CLEANSTART-2026-SI50650 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux

Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

PT-2026-122357

Security vulnerability affects the gst-plugins-good package. The gst avi demux parse ncdt function in gst/avi/gstavidemux...

PT-2026-122368

Security vulnerability affects the gst-plugins-good package. The gst avi demux parse ncdt function in gst/avi/gstavidemux...

PT-2026-122397

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gst avi demux invert function which allows a heap overwrite while parsing avi files...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8863-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8863-1 advisory. Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio...

USN-8863-1 gst-plugins-good1.0 vulnerabilities

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...

USN-8863-1: GStreamer Good Plugins vulnerabilities

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_6750)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266750 advisory. GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer: GStreamer: Remote Code Execution via heap-based buffer...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (ALMALINUX9.6:CLSA-2026:1776334207)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776334207 advisory. - GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...