7938 matches found
CVE-2024-53615
CVE-2024-53615 Una vulnerabilidad de inyección de comandos en el componente de renderizado de miniaturas de video de Karl Ward files.gallery v0.3.0 hasta 0.11.0 permite a atacantes remotos ejecutar código arbitrario mediante un archivo de video manipulado. Prerrequisitos: ffmpeg en PATH config.ph...
CVE-2026-8461
🎬 CVE-2026-8461 — PixelSmash Escritura Fuera de Límites Crítica en el Decodificador MagicYUV de FFmpeg Un archivo de video malicioso puede convertirse en un arma. PixelSmash es una vulnerabilidad crítica de corrupción de memoria que afecta al decodificador MagicYUV de FFmpeg, que permite a un...
CVE-2026-78430
CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...
CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...
EUVD-2026-65092
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...
OPENSUSE-SU-2026:11563-1 ffmpeg-4-4.4.8-4.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.8-4.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-75146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer libavformat/dashdec.c. When a live DASH manifest is refreshed with a startNumber...
Linux Distros Unpatched Vulnerability : CVE-2026-75145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long...
Linux Distros Unpatched Vulnerability : CVE-2026-75141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single...
Linux Distros Unpatched Vulnerability : CVE-2026-75144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer libavformat/rtpencvc2hq.c that allows attackers to...
UBUNTU-CVE-2026-75142
FFmpeg before commit 9d786e4 contains a stack buffer overflow in the M...
UBUNTU-CVE-2026-75145
FFmpeg before commit b4c199c contains an incorrect integer narrowing c...
UBUNTU-CVE-2026-75144
FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi...
UBUNTU-CVE-2026-75141
FFmpeg before commit acf5d7c contains a heap buffer overflow in the hv...
Linux Distros Unpatched Vulnerability : CVE-2026-75142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer libavformat/mpegenc.c. When muxing input with more streams than the muxer's...
Linux Distros Unpatched Vulnerability : CVE-2026-75143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader libavformat/librist.c. libristread ignored its size argument and copied...
UBUNTU-CVE-2026-75147
FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1...
UBUNTU-CVE-2026-75146
FFmpeg before commit 65b0dab contains an out-of-bounds read in the DAS...
Linux Distros Unpatched Vulnerability : CVE-2026-75147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a...