openSUSE 16: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (openSUSE-SU-2026:21522-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21522-1 advisory. Changes in ffmpeg-4: - CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder bsc1272758 - CVE-2026-64832: Double-Free in NVDEC Hardwa...

Security update for ffmpeg-4 (important)

openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21522-1 Rating: important References: bsc1272752 bsc1272754 bsc1272758 bsc1272765 bsc1272768 Cross-References: CVE-2026-64830 CVE-2026-64832...

CVE-2026-64830

creationtimestamp| type| source ---|---|--- 2026-07-22 18:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrawer4nfq22 2026-07-22 19:40:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrb3c3yknx2y 2026-07-22 23:01:23+00:00| seen|...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...