CVE-2026-125041

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

wholeaked

Introduction , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked is a file-sharing tool that allows you to find the responsible person in case of a leakage...

CVE-2026-125097

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

DEBIAN-CVE-2026-125041

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

CVE-2026-125041

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

EUVD-2026-120251

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

CVE-2026-125097

FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory disclosure vulnerability within the raw_decode() function in libavcodec/rawdec.c . The root cause is a failure to verify that the packet stride covers a full row for video with 1 to 8 bits per pixel. An attacker can exploit t...

CVE-2026-125097 FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video Decoder

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

CVE-2026-125097 FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video Decoder

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

EUVD-2026-120151

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

CVE-2026-125041

A flaw exists in GStreamer's gst-plugins-good MOV/MP4 demuxer, specifically within the qtdemux component. When processing an uncompressed video track, the demuxer fails to validate the declared row alignment and chroma geometry before building a video buffer layout. This oversight allows a crafte...

PT-2026-140959

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

CVE-2026-125041: Red Hat: A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer

A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the...

CVE-2026-125097: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw_decode() in libavcodec/rawdec.c…

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

PT-2026-140990

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw decode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packet...

CVE-2017-8367

CVE-2017-8367 PoC exploit for vulnerability CVE-2017-8367 Easy Mov Converter Register functionality Stack-Based Buffer Overflow. Usage Execute script and the file POCPayload.txt will be created containing the payload. python3 payloadgeneratorCVE-2017-15950.py Open the output file on notepad and...

pop-mov-ss-exploit

This repository does not have a README...

CVE-2026-120456

L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isomreadhdlr and isomreaddrefentry in core/read.c triggered by oversized box sizes. Attackers can supply crafted MP4 or MOV files declaring hdlr or url box sizes larger than remaining data, stalling the stream position an...

CVE-2026-120456 L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes

L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isomreadhdlr and isomreaddrefentry in core/read.c triggered by oversized box sizes. Attackers can supply crafted MP4 or MOV files declaring hdlr or url box sizes larger than remaining data, stalling the stream position an...

CVE-2026-120456 L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes

L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isomreadhdlr and isomreaddrefentry in core/read.c triggered by oversized box sizes. Attackers can supply crafted MP4 or MOV files declaring hdlr or url box sizes larger than remaining data, stalling the stream position an...