PT-2026-141064

FFmpeg through 9.0.2 contains a memory leak vulnerability in alloc frame in libavcodec/vvc/refs.c that leaks SPS and PPS references when frame buffer allocation fails. Attackers can supply a crafted VVC H.266 stream that repeatedly replaces parameter sets, steadily growing memory use and causing...

PT-2026-141079

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc frame function in libavcodec/vvc/refs.c that undersizes the reference picture list allocation on 32-bit builds. Attackers can supply a crafted VVC H.266 file with a very large number of NAL units per access...

PT-2026-128356

In the Linux kernel, the following vulnerability has been resolved: llc: reserve device headroom for allocated frames llc alloc frame reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet devices such as VLAN devices, where vlan dev hard header pushes a VLA...

PT-2026-116745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the llc alloc frame function where link-layer headroom is reserved based solely on the device type. This approach is insufficient for stacked Ethernet devices, such as...