PUB-A-508715031

In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508715934

In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508716174

In scopyhostapbparam of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-93236

A flaw was found in the Linux kernel's Meson video decoder driver. When processing video format negotiation requests with an unsupported format on the output queue, the driver improperly falls back to a format that may not be supported by the platform format table. This issue leads to a NULL...

Astra Linux – vulnerability in ffmpeg

A use-after-free vulnerability was found in FFmpeg’s RASC video decoder. The decodemove function initializes a read pointer into a decompressed buffer; however, subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Media: MediTech; vcodec: Fixed the H264 multi-stateless decoder’s match warning. Fixed a match static checker warning in vdech264reqmultiif.c. This issue causes a kernel crash when fb is NULL...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130377 advisory. ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy...

Media Video Decoder Code Execution

The vulnerability of the Media Video Decoder decoder for Windows systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-100220

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

EUVD-2026-100333

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-100220

A heap-based buffer overflow exists in the Windows Media Video Decoder , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the documents confirm the impact and root cause, specific exploit details or in-t...

Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

PT-2026-111895

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 11 26H2 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in the Windows Media Video Decoder. This flaw allows an unauthorized remote attacker to execute arbitrary code a...

PT-2026-116206

Уязвимость декодера Media Video Decoder операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Microsoft Windows: CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-100220: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-97581

A flaw was found in the Linux kernel's Hantro video decoder driver. When processing High Efficiency Video Coding HEVC video streams, the driver fails to validate the number of tile rows and columns against the allocated buffer capacity. A local attacker could exploit this vulnerability by...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...