CVE-2026-107697

A flaw was found in FFmpeg's HTTP Live Streaming HLS demuxer. A remote attacker can exploit this issue by supplying a specially crafted master playlist that references disallowed protocols or local files. This bypasses security restrictions and causes the application to open restricted resources,...

CVE-2026-107695

A flaw was found in FFmpeg. An infinite loop vulnerability in the HTTP Live Streaming HLS demuxer allows remote attackers to cause a Denial of Service DoS. By tricking a user into processing a specially crafted, self-referencing playlist file, an attacker can force the application into an endless...

CVE-2026-107677

A flaw was found in FFmpeg. An attacker could cause a Denial of Service DoS by supplying a specially crafted media presentation description .mpd manifest containing an empty media segment URL. When processed by the Dynamic Adaptive Streaming over HTTP DASH demuxer, this input triggers an infinite...

CVE-2026-107697

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...

CVE-2026-107695

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that...

CVE-2026-107697 FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...

CVE-2026-107697

FFmpeg versions before 8.1.3 are vulnerable to a protection mechanism failure in the HLS demuxer . An attacker can provide a crafted master playlist that causes the parse_playlist() function to open child playlists using disallowed protocols or non-multimedia local files. This bypasses existing p...

EUVD-2026-95125

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...

CVE-2026-107695

FFmpeg versions prior to 8.1.3 are vulnerable to an infinite loop within the HLS demuxer . The root cause is that the parse_playlist() function incorrectly accepts Master Playlist tags inside Media Playlists . A remote attacker can exploit this by tricking a victim into opening a crafted, self-re...

EUVD-2026-95123

FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that...

VLC_CVE-2021-25801_Analysis

CVE-2021-25801 分析 この脆弱性は、有効なスーパーインデックスチャンクが指すサブインデックスチャンクを読み取ろうとする際に、Parseindx に渡されるチャンクのタイプを十分にチェックしていないことに起因します。 else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value for super index if !psys-bseekable return; avichunkt cksub; for unsigned i = 0; i ientriesinuse; i++ if...

CVE-2026-107677

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so getcurrentfragment calls avstrireplace...

CVE-2026-107678

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

CVE-2026-107678

Versions of FFmpeg through 9.0.2 are vulnerable to a stack exhaustion vulnerability in the av_encryption_init_info_free() function located in libavutil/encryption_info.c. The issue stems from the recursive freeing of AVEncryptionInitInfo linked lists created by the MOV demuxer's mov_read_pssh() f...

CVE-2026-107678 FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

EUVD-2026-95083

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

CVE-2026-107677

Versions of FFmpeg through 9.0.2 are vulnerable to a denial of service (DoS) condition in the DASH demuxer . The root cause is an infinite loop triggered when a crafted .mpd manifest contains an empty SegmentTemplate media URL (e.g., media=""). This causes the get_current_fragment() function to c...

CVE-2026-107677 FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so getcurrentfragment calls avstrireplace...

EUVD-2026-95082

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so getcurrentfragment calls avstrireplace...

PT-2026-108113

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...