872 matches found
CVE-2025-70308
CVE-2025-70308 describes an out-of-bounds read in GPAC v2.4.0’s GSF demuxer filter, exploitable via a crafted .gsf file to cause Denial of Service. The connected sources (CNVD, OSV, Debian/NASL, NVD, etc.) confirm GPAC as the affected product and the GSF demuxer as the vulnerable component, with ...
CVE-2025-70308
Removed by vendor...
CVE-2019-12874
An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...
PT-2026-23765
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with the library is required for exploitation, and attack vectors may vary...
PT-2026-23763
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with the library is required for exploitation, and attack vectors may vary...
Updated ffmpeg packages fix security vulnerabilities
FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the avsamplessetsilence function in thelibavutil/samplefmt.c:260:9 component. CVE-2023-50007 FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the avmalloc...
TencentOS Server 3: gstreamer1-plugins-bad-free (TSSA-2024:0196)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0196 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: gstreamer1-plugins-bad-free (TSSA-2023:0323)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0323 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
ROS-20251110-04
A vulnerability in the qtdemuxparsetrak function of the Gstreamer multimedia framework is related to a boundary condition in the MOV/MP4 demultiplexer. Exploitation of the vulnerability could allow an attacker acting remotely, gain access to potentially sensitive information A vulnerability in th...
USN-7830-1: FFmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled the return values of functions in its Firequalizer filter and in the HTTP Live Streaming HLS implementation, leading to a NULL pointer dereference. If a user was tricked into loading a crafted media file, a remote attacker could possibly use this...
JLSEC-2025-137 FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an...
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...
JLSEC-2025-145 FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an...
FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...
JLSEC-2025-142 A flaw was found in FFmpeg's TTY Demuxer
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...
JLSEC-2025-146 A flaw was found in FFmpeg's HLS demuxer
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...
JLSEC-2025-116 Prior to ffmpeg version 4.3, the tty demuxer did not have a '`read_probe`' function assigned to it
Prior to ffmpeg version 4.3, the tty demuxer did not have a 'readprobe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim as long...
EUVD-2009-4604
Malware in sbrugna...
EUVD-2018-10708
Malware in sbrugna...
EUVD-2010-1470
Malware in sbrugna...