Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004352 advisory. In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003810 advisory. An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001120 advisory. In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004337 advisory. In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional...

CVE-2025-51602

CVE-2025-51602 affects VideoLAN VLC media player prior to 3.0.22. The vulnerability is an out-of-bounds read in mmstu.c that can lead to a denial of service when processing a crafted 0x01 response from an MMS server. Exploitation details are not provided beyond the MMS-triggered read/DoS describe...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001600 advisory. drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIGVMAPSTACK option, which allows...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003683 advisory. The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004289 advisory. An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c, which ma...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000600 advisory. drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service kernel memory write operation or possibly...

MiracleLinux 4 : firefox-38.2.0-4.0.1.AXS4 (AXSA:2015-442:07)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-442:07 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. With this update, following issues are...

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

UBUNTU-CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2021-47799

CVE-2021-47799 affects Visual Tools DVR VX16 version 4.2.28. The vulnerability is a local privilege escalation in the product’s Sudo configuration, where unsafe sudo settings allow an attacker to gain root access by using mount commands to bind a shell. The impact is system‑level privileges escal...

CVE-2021-47775 YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)

YouTube Video Grabber, now referred to as YouTube Downloader, 1.9.9.1 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious payload of 712 bytes with SEH manipulation to trigger a...

CVE-2021-47775 YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)

YouTube Video Grabber, now referred to as YouTube Downloader, 1.9.9.1 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious payload of 712 bytes with SEH manipulation to trigger a...

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

...

CVE-2025-68960

Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68819

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100i2cmsg rlen value is a user-controlled value, but dtv5100i2cmsg does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeofst-data, an...

CVE-2025-70303

CVE-2025-70303 concerns GPAC v2.4.0, where the uncv_parse_config() function is vulnerable to a heap overflow (CNVD and Red Hat listings corroborate as a DoS risk). Exploitation involves processing a crafted MP4 file, leading to denial of service. Connected sources consistently describe a DoS outc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002212 advisory. The dovideosetspupalette function in fs/compatioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow...