CVE-2026-54241

libde265 , an open-source H.265/HEVC video codec, is affected by a signed 32-bit integer overflow in the SAO (Sample Adaptive Offset) sequential filter input-buffer size calculation. A crafted HEVC stream with large dimensions and 16-bit luma samples causes an undersized allocation, leading to an...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 看起来很吓人。还记得 Stagefright 和 PNG 漏洞吗？通过 CVE-2019-2107，解码器/编解码器在 mediacodec 用户下运行，利用精心构造的视频（启用了图块 - pspps-i1tilesenabledflag）可能实现 RCE。受影响的编解码器是 HVEC（也称为 H.265 和 MPEG-H Part 2） exploit rce android stagefright cve 更多信息 LineageOS 安卓: root@kitploit: 02-11...

CVE-2026-55294

CVE-2026-55294 is a heap buffer overflow in the function ihevcd_get_tu_data_size of ihevcd_utils.c within the Android platform. The out-of-bounds write enables local escalation of privilege with only low privileges required and no user interaction. It is rated CVSS 3.1 7.8 (HIGH) . The vulnerabil...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-20464

CVE-2026-20464 affects the hevc decoder with a possible out-of-bounds write caused by an integer overflow. This could enable remote escalation of privilege if the attacker already has System privileges; no user interaction is required. Patch ALPS11104718 (Issue MSV-8297) is identified as the reme...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

EUVD-2026-52054

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-20464

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

PT-2026-47120

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=516422427 Crash type: Heap-buffer-overflow READ 1 Crash state: ihevcd sao shift ctb ihevcd process ihevcd parse slice data...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Media: MediTech: vcodec: Fixed an oops when HEVC initialization fails. The stateless HEVC decoder saves the instance pointer in the context, regardless of whether the initialization succeeded or not. This caused a use-after-fr...

EUVD-2017-1082

Malware in sbrugna...

EUVD-2022-35703

Malicious code in bioql PyPI...

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

The vulnerability of the hevc_frame_end function (libavcodec/hevcdec.c) in the FFmpeg multimedia library allows a hacker to disclose protected information.

The vulnerability of the hevcframeend function in the FFmpeg multimedia library libavcodec/hevcdec.c relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2024-35921

A vulnerability was found in the Linux kernel's MediaTek vdechevcreqmultiif.c driver in the vdechevcsliceinit function, where a lack of proper checking can lead to a use-after-free scenario. This issue occurs when the stateless HEVC decoder saves the instance pointer in the context without checki...

CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...

DEBIAN-CVE-2024-35921

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix oops when HEVC init fails The stateless HEVC decoder saves the instance pointer in the context regardless if the initialization worked or not. This caused a use after free, when the pointer is freed i...