HTML5 Video Player buffer error vulnerability

Html5Videoplayer is a web video playback component implemented using HTML5 technology by Html5Videoplayer Inc. Version 1.2.5 of HTML5 Video Player contains a buffer overflow vulnerability, which stems from insufficient input validation of the KEYCODE field. This vulnerability could lead to a loca...

PT-2026-32159

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigge...

PT-2026-54331

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the Media component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by...

CVE-2019-25689: Out-of-bounds Write

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigge...

Divxtodvd Easy Video to iPod Converter Buffer Error Vulnerability

Divxtodvd Easy Video to iPod Converter is a software tool developed by the Thai company Divxtodvd, designed for converting video formats and adapting them for playback on iPod devices. Version 1.6.20 of Easy Video to iPod Converter contains a buffer overflow vulnerability, which stems from...

PT-2026-46671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue in the Media component allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted video file. Use after free is a memory...

EUVD-2026-21236

A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit ha...

Zod jsVideoUrlParser vulnerable to ReDoS in util.js

A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1. The impacted element is the function getTime in the library lib/util.js. This manipulation of the argument timestamp causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit ha...

Regular Expression Denial of Service (ReDoS)

Overview js-video-url-parser is an A parser to extract provider, video id, starttime and others from YouTube, Vimeo, ... urls Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the getTime function in lib/util.js. An attacker can cause excessive...

@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +304 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)

js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: SNYK:JS-JSVIDEOURLPARSER-15995499...

@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +304 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)

js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: GHSA-8FGX-WGVR-PCX8...

@1eg/theme-editor-cli (>=0.13.0, <=1.17.0), @aicontextlab/cli (>=0.0.0-dev, <=0.2.2) +304 more potentially affected by CVE-2026-5986 via js-video-url-parser (>=0.2.8, <=0.5.1)

js-video-url-parser NPM version =0.2.8, =0.13.0, =0.0.0-dev, =0.2.5, =1.0.103, =0.12.77-beta.1, =0.1.0, =0.1.136, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =1.2.10 and more Source cves: CVE-2026-5986 Source advisory: OSV:GHSA-8FGX-WGVR-PCX8...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created video file...

SUSE CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

SUSE CVE-2026-5908

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: Low...

SUSE CVE-2026-5909

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: Low...

SUSE CVE-2026-5910

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: Low...