CVE-2025-60467

Removed by vendor...

CVE-2025-60467

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

PT-2026-52133

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A buffer overflow occurs in the gf media import function located in /media tools/av parsers.c. This issue allows remote attackers to cause a Denial of Service DoS by providing a special...

CVE-2025-60471

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

PT-2026-52132

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf filter pid inst swap delete task function located in /filter core/filter pid.c. This flaw allows an attacker to trigger a Denial of Service DoS b...

CVE-2025-60466

A use-after-free in the gffilterpidgetpacket function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

kubevirt1.8-container-disk-1.8.3-1.1 on GA media (moderate)

kubevirt1.8-container-disk-1.8.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11091-1 Rating: moderate Cross-References: CVE-2021-43565 CVE-2023-26484 CVE-2023-44487 CVE-2024-33394 CVE-2025-22872 CVE-2025-64433 CVE-2025-64437 CVE-2026-33186 CVE-2026-9804 CVSS scores: CVE-2021-43565 SUSE : 7....

CVE-2025-60467

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

GHSA-RW9Q-97R9-8GVH motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...

motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...

Command Injection

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Command Injection via the sanitizeFFmpegCommand process. An attacker can execute arbitrary operating system commands by injecting a single & character into the...

CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38549: efivarfs: Fix memory leak of efivarfsfsinfo in fscontext error paths bsc1248235. CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished...

docker-stable-24.0.9_ce-18.1 on GA media (moderate)

docker-stable-24.0.9ce-18.1 on GA media Announcement ID: openSUSE-SU-2026:11075-1 Rating: moderate Cross-References: CVE-2026-33186 CVE-2026-33747 CVE-2026-33748 CVE-2026-33814 CVE-2026-33997 CVE-2026-34040 CVE-2026-39821 CVE-2026-41567 CVSS scores: CVE-2026-33186 SUSE : 8.1...

OPENSUSE-SU-2026:11105-1 apache-commons-validator-1.10.1-1.1 on GA media

These are all security issues fixed in the apache-commons-validator-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11109-1 libssh2-1-1.11.1-3.1 on GA media

These are all security issues fixed in the libssh2-1-1.11.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11108-1 grafana-12.4.4-1.1 on GA media

These are all security issues fixed in the grafana-12.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11111-1 pacemaker-3.0.2+20260616.4544f351-1.1 on GA media

These are all security issues fixed in the pacemaker-3.0.2+20260616.4544f351-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11114-1 gvim-9.2.0530-1.1 on GA media

These are all security issues fixed in the gvim-9.2.0530-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11104-1 NetworkManager-applet-openvpn-1.12.5-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-openvpn-1.12.5-1.1 package on the GA media of openSUSE Tumbleweed...