CVE-2026-67290

FreeRDP before 3.29.0 is affected by a heap out-of-bounds read in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. The vulnerability allows a remote attacker to crash a server by sending malformed media format data, exploiting fixed offsets without...

Flash Player Adobe Integrated Runtime Code Execution

The vulnerabilities of the Flash Player and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service interruptions such as out-of-memory reading or memory corruption using specially crafted MPEG-4...

Android Code Execution

The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is due to a loss of integer precision. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted MPEG-4 format data...