CVE-2026-8461-PoC

PoC de CVE-2026-8461 !WARNING Esta PoC ha sido generada completamente por IA. Uso: root@kitploit: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi Una versión sin parche de ffmpeg se bloqueará al procesar baseline.avi...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — PoC de escritura fuera de límites en el montón de MagicYUV de FFmpeg !WARNING Este repositorio contiene un PoC funcional de explotación para una vulnerabilidad de corrupción del montón. Está destinado únicamente a investigación de seguridad autorizada, contextos CTF y...

CVE-2024-53615

CVE-2024-53615 Una vulnerabilidad de inyección de comandos en el componente de renderizado de miniaturas de video de Karl Ward files.gallery v0.3.0 hasta 0.11.0 permite a atacantes remotos ejecutar código arbitrario mediante un archivo de video manipulado. Prerrequisitos: ffmpeg en PATH config.ph...

CVE-2026-26833

CVE-2026-26833: inyección de comandos del sistema operativo en thumbler Resumen thumbler hasta la versión 1.1.2 permite la inyección de comandos del sistema operativo en thumbnail en lib/thumbler.js. El paquete concatena los valores input, output, time y size en una única cadena de comandos ffmpe...

CVE-2026-73694 FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd in CLI.php that strips shell-metacharacter escaping, allowing attacker-controlled input to reach an exec sink unsanitized. Attackers can exploit this through an interactive path...

UBUNTU-CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP...

practice-22-23

Proyecto Para ejecutar: ./script.sh Repositorio en GitHub - https://github.com/LaCinquette/practice-22-23 Desarrollo 1. Para buscar la vulnerabilidad elegí el proyecto FFmpeg. Encontré en él un commit que cumplía los requisitos, a saber: Correspondía al tipo CWE-476 - desreferencia de puntero nul...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

USN-8738-1 ffmpeg vulnerabilities

It was discovered that FFmpeg incorrectly handled certain video frames when using the hqdn3d filter. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036 Adrian Junge discovered that FFmpeg incorrectly handled certain compressed video...

CVE-2026-8461

🎬 CVE-2026-8461 — PixelSmash Escritura Fuera de Límites Crítica en el Decodificador MagicYUV de FFmpeg Un archivo de video malicioso puede convertirse en un arma. PixelSmash es una vulnerabilidad crítica de corrupción de memoria que afecta al decodificador MagicYUV de FFmpeg, que permite a un...

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

EUVD-2026-74264

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-30754

A memory corruption vulnerability in FFmpeg before 8.1 occurs in the nal_send function within libavformat/rtpenc_h264_hevc.c . When transmitting H.264/HEVC streams via RTP, a crafted input file causes a negative size parameter (size=-3) to be passed to memcpy , leading to memory corruption. The i...

FFMPEG-exploit

Este repositorio no tiene un README...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

ffmpeg-8-8.1.2-3.1 on GA media (moderate)

ffmpeg-8-8.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11682-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVE-2026-70628 CVE-2026-70629 CVE-2026-70630...

CVE-2026-85696

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

EUVD-2026-71145

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...