PT-2026-32370

Name of the Vulnerable Software and Affected Versions FFmpeg version 8.0.1 Description A heap buffer overflow in the av bprint finalize function allows attackers to cause a Denial of Service DoS via a crafted input. A heap buffer overflow occurs when a program writes more data to a heap-allocated...

Important: Red Hat Security Advisory: nginx:1.24 security update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OESA-2026-1826 gstreamer1-plugins-bad-free security update

GStreamer is a pipeline-based multi media framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. This package contains plug-ins that are not tested well enough yet, or the code is not of good...

The vulnerability of the ipu6_buttress_isr() function in the drivers/media/pci/intel/ipu6/ipu6-buttress.c file of the Linux multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the ipu6buttressisr function in the drivers/media/pci/intel/ipu6/ipu6-buttress.c file of the Linux multimedia device support driver module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the dvb_usb_adapter_init() function in the drivers/media/usb/dvb-usb/dvb-usb-init.c file of the multimedia device driver module for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dvbusbadapterinit function in the drivers/media/usb/dvb-usb/dvb-usb-init.c file of the Linux operating system’s multimedia device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the az6007_i2c_xfer() function in the drivers/media/usb/dvb-usb-v2/az6007.c driver for multimedia devices in Linux operating systems allows a hacker to induce a service failure.

The vulnerability of the az6007i2cxfer function in the drivers/media/usb/dvb-usb-v2/az6007.c driver for multimedia devices in Linux operating systems is related to the pointer assignment. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ov5648_remove() function in the drivers/media/i2c/ov5648.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ov5648remove function in the drivers/media/i2c/ov5648.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `vidtv_bridge_dvb_init()` function in the `drivers/media/test-drivers/vidtv/vidtv_bridge.c` file of the Linux kernel-based multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vidtvbridgedvbinit function in the drivers/media/test-drivers/vidtv/vidtvbridge.c file, a driver for multimedia devices in the Linux operating system, is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the stk1160_disconnect() function in the drivers/media/usb/stk1160/stk1160-core.c file of the Linux operating system’s multimedia device driver support module allows a malicious actor to cause a service failure.

The vulnerability of the stk1160disconnect function in the drivers/media/usb/stk1160/stk1160-core.c file of the Linux operating system’s multimedia device driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting...

The vulnerability of the bdisp_probe() function in the drivers/media/platform/st/sti/bdisp/bdisp-v4l2.c file of the Linux kernel-based multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the bdispprobe function in the drivers/media/platform/st/sti/bdisp/bdisp-v4l2.c file of the Linux kernel’s multimedia device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the max9286_v4l2_register() function in the drivers/media/i2c/max9286.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the max9286v4l2register function in the drivers/media/i2c/max9286.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-8112-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8112-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

DEBIAN-CVE-2026-33144

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...

CVE-2026-33144

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...

UBUNTU-CVE-2026-33144

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...

CVE-2026-33144 GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing)

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...

EUVD-2026-13632

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...

ALPINE-CVE-2026-32942

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17...

CVE-2026-32942

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17...