VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value for super inde...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

CLEANSTART-2026-SI50650 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux

Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...

CLEANSTART-2026-UF43430 gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux

Security vulnerability affects the gst-plugins-good package. The gstavidemuxparsencdt function in gst/avi/gstavidemux...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8863-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8863-1 advisory. Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio...

USN-8863-1: GStreamer Good Plugins vulnerabilities

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...

USN-8863-1 gst-plugins-good1.0 vulnerabilities

Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-17072 Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker cou...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (ALMALINUX9.6:CLSA-2026:1776334207)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776334207 advisory. - GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

AlmaLinux 9.6 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (ALMALINUX9.6:CLSA-2026:1776334207)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776334207 advisory. - GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar...

Rocky Linux 8 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_6750)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266750 advisory. GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer: GStreamer: Remote Code Execution via heap-based buffer...

AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (ALMALINUX9.2:CLSA-2026:1776778859)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776778859 advisory. - GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar...

CVE-2026-77396

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the AVI Audio Video Interleave parser. A remote attacker could exploit this by providing a specially crafted AVI file. When an application processes this file, it can lead to memory corruption, potentially allowing the...

Linux Distros Unpatched Vulnerability : CVE-2026-77396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses...

CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media...

DEBIAN-CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media...

EUVD-2026-83196

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media...

CVE-2026-77396 PJSIP: Heap buffer overflow in the AVI parser

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media...

CVE-2026-77396

PJSIP (a free and open source multimedia communication library in C) versions 2.17 and earlier contain a heap buffer overflow in the AVI parser at pjmedia/src/pjmedia/avi_player.c. The parser uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is...