EUVD-2019-5703

Malware in sbrugna...

EUVD-2017-8827

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414375 advisory. In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvbdemuxopen and...

EUVD-2024-42820

Malicious code in bioql PyPI...

EUVD-2024-42821

Malicious code in bioql PyPI...

OSV-2025-766 Heap-buffer-overflow in Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027676 Crash type: Heap-buffer-overflow READ 4 Crash state: Open demuxProbe vlcmoduleload...

OSV-2025-764 Global-buffer-overflow in Ogg_CreateES

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=445845228 Crash type: Global-buffer-overflow READ 11 Crash state: OggCreateES Demux demuxprocessstream...

Linux Distros Unpatched Vulnerability : CVE-2017-17670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid...

Linux Distros Unpatched Vulnerability : CVE-2019-14533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. CVE-2019-14533 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2024-47540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the...

OSV-2025-620 Heap-buffer-overflow in FragPrepareChunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437694938 Crash type: Heap-buffer-overflow WRITE 8 Crash state: FragPrepareChunk DemuxFrag demuxprocessstream...

OSV-2025-616 Heap-buffer-overflow in Open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437593508 Crash type: Heap-buffer-overflow READ 7 Crash state: Open demuxProbe vlcmoduleload...

OSV-2025-613 Heap-buffer-overflow in check_sync_pes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437653047 Crash type: Heap-buffer-overflow READ Crash state: checksyncpes Demux demuxprocessstream...

PT-2025-32599 · Git · Mpv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435536867 Crash type: UNKNOWN READ Crash state: mov read header avformat open input demux open lavf...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An out-of-band read issue has been discovered in the qtdemuxparsesvq3stsddata function within qtdemux.c. In the FOURCCSMI case, seqhsize is read from the input file without proper validation. If seqhsize is greater than...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. This function does not properly check the validity of the stream-codecpriv pointer. If...

Astra Linux – Vulnerability in gstreamer1.0, gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3dmxprocess of the file filters/reframemp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2022-38855

Certain The MPlayer Project products are vulnerable to Buffer Overflow via function genshvideo of mplayer/libmpdemux/demuxmov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...