CVE-2026-92063

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

CVE-2026-92043

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Audio/Video component...

CVE-2026-24074

CVE-2026-24074 is an out-of-bounds write in a Video component on Qualcomm platforms. The root cause is memory corruption that occurs when data with large offset and length values exceeds buffer limits during data copy operations. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low co...

CVE-2026-24074 Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...

CVE-2026-24074 Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...

CVE-2026-24073 Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

CVE-2026-24073 Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

CVE-2026-24073

CVE-2026-24073 is an out-of-bounds write in Qualcomm's Video component, specifically in the processing of decode statistics . The root cause is insufficient validation of an offset against structure size , leading to memory corruption. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local a...

CVE-2026-92586

AVideo through 29.0 commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify video access permissions in the setapicomment function, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requests to the comment API endpoi...

CVE-2026-89871

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

DEBIAN-CVE-2026-89871

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

CVE-2026-89871

CVE-2026-89871 affects the Linux kernel in the media: video-i2c subsystem. The root cause is that kthread_run() returns an ERR_PTR on failure (not NULL), and when start_streaming() fails, the data->kthread_vid_cap field is left holding this error pointer instead of being reset. This leads to t...

CVE-2026-89871 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

EUVD-2026-80471

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

CVE-2026-89871 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails, data-kthreadvidcap is left holding this error pointer instead of being...

PT-2026-93511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the zoran media driver. The zoran init video device function sets zoran vdev release as the release callback. When video unregister device is called, the V4...

Linux Distros Unpatched Vulnerability : CVE-2026-89871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: video-i2c: fix kthread error pointer left in kthreadvidcap on failure kthreadrun returns an ERRPTR on failure, not NULL. When startstreaming fails,...

Linux Distros Unpatched Vulnerability : CVE-2026-91086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c o...