CVE-2026-64832

FFmpeg 4.4–8.1.2 contains a double-free in NVIDIA NVDEC hardware decoding (libavcodec/nvdec.c). When no decoder surfaces remain, ff_nvdec_start_frame_sep_ref frees memory via nvdec_fdd_priv_free, and the caller frees the same frame description data, causing a double-free of the underlying decoder...

NVIDIA SHIELD Experience Buffer Overflow Vulnerability

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a buffer overflow vulnerability that originates from a boundary error in NVIDIA NVDEC in the NVIDIA Tegra kernel driver. An attacker could exploit the vulnerability to trigger memory...