53 matches found
SUSE CVE-2026-97577
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
DEBIAN-CVE-2026-97578
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...
DEBIAN-CVE-2026-97577
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
CVE-2026-97577
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
CVE-2026-97577
The Linux kernel contains a vulnerability in the rockchip AV1 decoder driver. Specifically, the function rockchip_vpu981_av1_dec_set_tile_info() fails to properly validate the number of tiles in an AV1 frame against the submitted entry count and the maximum capacity of the AV1_MAX_TILES buffer. T...
Linux Distros Unpatched Vulnerability : CVE-2026-97577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols...
CVE-2026-97577: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
CVE-2026-97577
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
UBUNTU-CVE-2026-75147
FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a sequence header OBU advanced its pointer and remaining-size counter by the encoded header length plus the OBU payload size without first...
Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-55433)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55433 advisory. - Fix ADPCM decoder input validation CVE-2026-19387 Resolves: RHEL-235500 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats...
The vulnerability of the `rockchip_vpu981_av1_dec_init()` function in the driver/media/platform/verisilicon/rockchip_vpu981_hw_av1_dec.c file of the Linux operating system’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rockchipvpu981av1decinit function in the driver/media/platform/verisilicon/rockchipvpu981hwav1dec.c file of the Linux operating system’s multimedia device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to...
OESA-2026-2928 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An out-of-bounds read i...
JLSEC-2026-649
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
Security update for ffmpeg-4 (important)
openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20914-1 Rating: important References: bsc1262047 Cross-References: CVE-2026-30997 CVSS scores: CVE-2026-30997 SUSE : 7.1...
DEBIAN-CVE-2026-30997
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30997
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-32368
Name of the Vulnerable Software and Affected Versions FFmpeg version 8.0.1 Description An out-of-bounds read occurs in the read global param function within the libavcodec/av1dec.c component. This issue allows attackers to cause a Denial of Service DoS by providing a crafted input. Recommendation...
CVE-2026-30997
An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in dav1d_prepare_intra_edges_8bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4508621294862336 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7daa01f24780 Crash State: dav1dprepareintraedges8bpc...
