Lucene search
+L

21 matches found

OSV
OSV
•added 2026/09/25 1:28 a.m.•5 views

OESA-2026-4075 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

6.5CVSS6.5AI score0.00469EPSS
SaveExploits1References3
OSV
OSV
•added 2026/09/20 1:22 p.m.•11 views

OESA-2026-3878 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

5.3CVSS6.4AI score0.00469EPSS
SaveExploits1References2
OSV
OSV
•added 2026/09/20 1:22 p.m.•11 views

OESA-2026-3877 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

5.3CVSS6.4AI score0.00469EPSS
SaveExploits1References2
OSV
OSV
•added 2026/09/20 1:22 p.m.•22 views

OESA-2026-3875 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

6.5CVSS6.5AI score0.00469EPSS
SaveExploits1References3
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•33 views

Astra Linux – Vulnerability in ffmpeg

A flaw was discovered in FFmpeg. This vulnerability allows for unexpected additional CPU load and storage consumption, potentially leading to reduced performance or denial of service due to the demuxing of arbitrary data as XBIN-format data without proper format validation...

5.3CVSS6.4AI score0.00469EPSS
SaveExploits1References3
OSV
OSV
•added 2025/10/19 7:08 p.m.•14 views

JLSEC-2025-148 A flaw was found in FFmpeg

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.3AI score0.00469EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/10/19 12:00 a.m.•2 views

PT-2025-45940

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS5.9AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-6604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or...

5.3CVSS5.8AI score0.00469EPSS
SaveExploits1References2
NVD
NVD
•added 2025/01/06 5:15 p.m.•22 views

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS0.00469EPSS
SaveExploits1References2
OSV
OSV
•added 2025/01/06 5:15 p.m.•4 views

DEBIAN-CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6AI score0.00469EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/06 5:15 p.m.•16 views

UBUNTU-CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.7AI score0.00469EPSS
SaveExploits1References3
Mend
Mend
•added 2025/01/06 4:41 p.m.•1 views

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

6.9CVSS0.00469EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2025/01/06 4:41 p.m.•27 views

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.3AI score0.00469EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2024/02/29 3:43 a.m.•10 views

SUSE CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.3AI score0.00469EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/05 12:00 a.m.•5 views

CVE-2020-27402: Undefined Security Weakness

The HK1 Box S905X3 TV Box contains a vulnerability that allows a local unprivileged user to escalate to root using the /system/xbin/su binary via a serial port UART connection or using adb...

7.8CVSS5.8AI score0.00537EPSS
SaveExploits1References1
myhack58
myhack58
•added 2017/06/27 12:00 a.m.•279 views

Vulnerability warning | FFmpeg aeration arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Recently a white hat in the HackerOne platform reported by ffmpeg vulnerability using ffmpeg HLS playlist processing way, can lead to local file exposure. Vulnerability description 6 on 24 May, the HackerOne platform named neex the white hat for the Russian social networking site VK. com reported...

7.1AI score
SaveExploits0
NVD
NVD
•added 2014/03/31 2:58 p.m.•48 views

CVE-2013-6774

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an...

10CVSS6.5AI score0.01587EPSS
SaveExploits3References2
Prion
Prion
•added 2014/03/31 2:58 p.m.•34 views

Design/Logic Flaw

Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse appprocess program via a crafted PATH environment variable for a /system/xbin/su process...

5CVSS6.8AI score0.01076EPSS
SaveExploits3References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/30 12:00 a.m.•7 views

CVE-2013-6770: Undefined Security Weakness

The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon option, which allows attackers to gain privileges by leveraging ADB shell access and a certain Linux UID, and then...

7.6CVSS6AI score0.00693EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2014/03/30 12:00 a.m.•2 views

PT-2014-3197

Name of the Vulnerable Software and Affected Versions CyanogenMod/ClockWorkMod/Koush Superuser package version 1.0.2.1 Description The issue concerns the CyanogenMod/ClockWorkMod/Koush Superuser package, which does not properly restrict the set of users who can execute /system/xbin/su with the...

7.6CVSS0.00693EPSS
SaveExploits3References2
Rows per page
Query Builder