308 matches found
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 4.7. It stems from an error path in altredaca10deviceadd and altrportbsetup, where dci structures are released prior to freeing the devres group. This allows access to memory that has been freed between releasing the dci and canceling the IR...
SUSE CVE-2026-100229
No standard GStreamer pipeline element invokes the vulnerable parser API. Exploitation would require a third-party application to call it with attacker-controlled H.266 DCI data...
UBUNTU-CVE-2026-100229
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
DEBIAN-CVE-2026-100229
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
CVE-2026-100229
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
CVE-2026-100229
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
CVE-2026-100229
Removed by vendor...
EUVD-2026-100958
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
Linux Distros Unpatched Vulnerability : CVE-2026-100229
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a...
PT-2026-113772
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A flaw exists in the H.266 codec parser library libgstcodecparsers. An out-of-bounds write occurs in the gst h266 parser parse dci function when a reserved field value is incorrectly...
CVE-2026-100229: Out-of-bounds Write
A flaw was found in GStreamer's H.266 codec parser library libgstcodecparsers. An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could...
GStreamer buffer error vulnerability
GStreamer has a buffer error vulnerability. This vulnerability stems from the DCI parsing function in GStreamer’s H.266 codec parsing library, which incorrectly accepts reserved field values, leading to out-of-bounds writes and potentially causing crashes or memory corruption...
Malicious code in itale-dci-sywfsetef (npm)
Source: amazon-inspector 582bf997dabe34de522276f541e5fde87d4f56c77bc71d2ba564e063134c2415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-ytd4q (npm)
Source: amazon-inspector 7c10c0dfef3e1b4d87ad8b5014a6f3c4b585c4657d3c7fac03104c6f616ec16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-sfdaawe (npm)
Source: amazon-inspector ad93f6abaddc9e87014b22502c939ee35a36685ff8c81dd07b759da7c93a8e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-rshafyt (npm)
Source: amazon-inspector c0bde64b0746538488406e5d473dcea29b11c3cb6d317a47ffb7e48974a67f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-srygfywevgt (npm)
Source: amazon-inspector a96ac241ea3600eb4b955e09502c23540a91179c939e934a0e5f6aff4c977693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-rsht (npm)
Source: amazon-inspector 9479dc56971a67f32000ef2b0aef2716615d64c660bff1dbf3efa901c0ddfb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-rsgustet (npm)
Source: amazon-inspector 544c78325a060ad3c3a1a02da609c4db2b053cd0692c8447ff70df3a4c417e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in itale-dci-shftyryt (npm)
Source: amazon-inspector f8c6075c76dce16e59601363c7fd4df917ff7541e69ba270334c6fb6208c3458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...