11019 matches found
CVE-2026-8461
š¬ CVE-2026-8461 ā PixelSmash Critical Out-of-Bounds Write in FFmpeg MagicYUV Decoder A malicious video file can become a weapon. PixelSmash is a critical memory corruption vulnerability affecting FFmpeg's MagicYUV decoder that allows an attacker to trigger an out-of-bounds write , resulting in...
cve-2025-9951-ffmpeg-jp2-poc
CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ ā the original deterministic GDB-launched PoC and its full research-journey writeup,...
CVE-2026-52295 vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
CVE-2026-52296 vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
GHSA-VP63-FQG3-CPH4 vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
GHSA-53PF-4457-QG7G vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
GHSA-923G-F8RQ-PV4W vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
CVE-2026-52297 vulnerabilities
Vulnerabilities for packages: ffmpeg-fips...
DRUPAL-CONTRIB-2026-220
This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...
FFMPEG-exploit
This repository does not have a README...
SUSE CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
PT-2026-120898
This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...
Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220
This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...
practice-22-23
Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...
GHSA-CRQP-42H3-7FCV vulnerabilities
Vulnerabilities for packages: ffmpeg, ffmpeg-fips...
GHSA-G222-RPM9-83X6 vulnerabilities
Vulnerabilities for packages: ffmpeg, ffmpeg-fips...
CVE-2026-96611 vulnerabilities
Vulnerabilities for packages: ffmpeg, ffmpeg-fips...
CVE-2026-30754 vulnerabilities
Vulnerabilities for packages: ffmpeg, ffmpeg-fips...
CVE-2025-52290
A flaw was found in ffmpeg. An attacker could exploit this vulnerability by providing a crafted media file to be processed by the application. This issue triggers a NULL pointer dereference in the avprivh264hasnumreorderframes function, leading to an unexpected application crash and resulting in ...
DEBIAN-CVE-2025-52290
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...