CVE-2026-119600

The software tcpflow through version 1.6.1 is vulnerable to an out-of-bounds read via the TCP Demultiplexer payload length. An unauthenticated attacker can trigger this by injecting crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files . The vulnerability, rooted in CWE-130 , allow...

CVE-2026-119600 tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files to leak adjacent memory into...

CVE-2026-119600 tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files to leak adjacent memory into...

FFmpeg RTP ASF DoS

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failure...

FFmpeg TY demultiplexer audio decoder Memory Corruption Privilege Escalation

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to corrupt memory, cause system failures, or execute arbitrary code...

FFmpeg IAMF demultiplexer DoS

The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260922-73-0016

The vulnerability in the Matroska MKV demultiplexer of the GStreamer multimedia framework arises from buffer overflows in the queue. This allows an attacker to cause the application to terminate abnormally service failure or execute arbitrary code...

CVE-2026-85445 MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resourc...

CVE-2026-85445

MOOS-IvP (through version 24.8.1) is vulnerable to a denial of service in the Demuxer::addMuxPacket() function, which trusts the packet count declared in mux headers without validation. A remote, unauthenticated attacker can declare arbitrarily large packet counts to trigger unbounded memory allo...

GPAC Out-of-Bounds Read Vulnerability

GPAC is an open source multimedia framework. GPAC suffers from an out-of-bounds read vulnerability that stems from the GSF demultiplexer filter component failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...

GPAC security vulnerabilities

GPAC is an open source multimedia framework. GPAC suffers from an out-of-bounds read vulnerability that stems from the GSF demultiplexer filter component failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...

CVE-2025-65407

A use-after-free in the MPEG1or2Demux::newElementaryStream function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG Program stream...

LIVE555 Streaming Media security vulnerabilities

LIVE555 Streaming Media is a cross-platform C++ open source library , focusing on providing solutions for streaming media applications , supporting a variety of standard protocols such as RTP/RTCP, RTSP and SIP. LIVE555 Streaming Media suffers from a post-release reuse vulnerability that stems fr...

ROS-20251110-04

A vulnerability in the qtdemuxparsetrak function of the Gstreamer multimedia framework is related to a boundary condition in the MOV/MP4 demultiplexer. Exploitation of the vulnerability could allow an attacker acting remotely, gain access to potentially sensitive information A vulnerability in th...

EUVD-2011-1684

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-30019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting ...

FFmpeg Demultiplexer DoS

The vulnerability of the DXA demultiplexer in the FFmpeg multimedia library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

Gstreamer Integer Overflow RCE

The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition in the parser that processes MP4/MOV demultiplexer templates. Exploiting this vulnerability allows an attacker to execute arbitrary code...

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that originates from an insecure file extension check that can be bypassed to trigger an arbitrary demultiplexer by appending a base64-encoded dat...

FFmpeg Demultiplexer Loop DoS

The vulnerability of the demultiplexer of the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially created PVA file...