PT-2026-65673

These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11384-1 ffmpeg-7-7.1.5-1.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg-7-7.1.4-5.1 on GA media (moderate)

ffmpeg-7-7.1.4-5.1 on GA media Announcement ID: openSUSE-SU-2026:11361-1 Rating: moderate Cross-References: CVE-2026-12706 CVSS scores: CVE-2026-12706 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Linux Distros Unpatched Vulnerability : CVE-2026-64832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to...

Linux Distros Unpatched Vulnerability : CVE-2026-66041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vfquirc filter that allows an attacker to corrupt he...

Linux Distros Unpatched Vulnerability : CVE-2026-66040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-65706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vfswaprect video filter that allows attackers to corrupt heap memory by...

Linux Distros Unpatched Vulnerability : CVE-2026-66036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vfhqdn3d filter that allows attackers to corrupt heap...

Linux Distros Unpatched Vulnerability : CVE-2026-66039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap...

Linux Distros Unpatched Vulnerability : CVE-2026-64834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2026-65705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by...

Linux Distros Unpatched Vulnerability : CVE-2026-64831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite...

Linux Distros Unpatched Vulnerability : CVE-2026-64830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap...

Linux Distros Unpatched Vulnerability : CVE-2026-64835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2026-66037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-65703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption b...

ffmpeg-8-8.1.2-2.1 on GA media (moderate)

ffmpeg-8-8.1.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11347-1 Rating: moderate Cross-References: CVE-2026-12706 CVE-2026-8461 CVSS scores: CVE-2026-12706 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-8461 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the zlibdecomp function when processing a zlib stream that inflates to fewer bytes than the expected frame size. An attacker can access uninitialized heap memory contents by supplying a crafted zlib...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the pngwritechunk process. An attacker can cause heap memory corruption, process crashes, or potentially achieve arbitrary code execution by supplying a crafted PNG image containing a malicious eXIf chunk...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the vfquirc filter. An attacker can corrupt heap memory and potentially execute arbitrary code by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions, where the second presentation has large...