646 matches found
OSV-2026-57 Heap-buffer-overflow in mkv::matroska_segment_c::TrackInit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475261418 Crash type: Heap-buffer-overflow READ 1 Crash state: mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::TrackInit mkv::matroskasegmentc::ParseTrackEntry...
PT-2026-27458
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475261418 Crash type: Heap-buffer-overflow READ 1 Crash state: mkv::matroska segment c::TrackInit mkv::matroska segment c::TrackInit mkv::matroska segment c::ParseTrackEntry...
CVE-2019-12874
An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...
SUSE CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
LIVE555 Streaming Media Heap Buffer Overflow Vulnerability (CNVD-2025-30509)
LIVE555 Streaming Media is a cross-platform C++ open source library , focusing on providing solutions for streaming media applications , supporting a variety of standard protocols such as RTP/RTCP, RTSP and SIP. LIVE555 Streaming Media suffers from a heap buffer overflow vulnerability that stems...
Linux Distros Unpatched Vulnerability : CVE-2025-65406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service D...
CVE-2025-65406
A flaw was found in Live555. A heap-based buffer overflow in MatroskaFile::createRTPSinkForTrackNumber allows attackers to cause a denial of service via a specially crafted MKV file...
EUVD-2025-200017
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
UBUNTU-CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
PT-2025-48492
Name of the Vulnerable Software and Affected Versions Live555 Streaming Media version 2018.09.02 Description A heap overflow exists in the MatroskaFile::createRTPSinkForTrackNumber function when processing crafted MKV files. This can lead to a Denial of Service DoS. The issue affects the parsing ...
CVE-2025-65406
The Live555 Streaming Media library (specifically version v2018.09.02 ) contains a heap-based buffer overflow vulnerability in the MatroskaFile::createRTPSinkForTrackNumber() function. This flaw stems from an error in the instruction responsible for freeing memory. An attacker can exploit this by...
CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
TencentOS Server 3: gstreamer1-plugins-good (TSSA-2022:0256)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0256 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
JLSEC-2025-103 A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
JLSEC-2025-102 In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU...
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
PT-2025-45892
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle open brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
PT-2025-45891
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff htmlmarkup to ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...