CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

CVE-2026-77396

NIST description about CVE: PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/aviplayer.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived...

SUSE CVE-2026-125064

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726decodeframe in libavcodec/g726.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435392-byte G.726 audio chunk to make the decoder read from a NULL buffer,...

SUSE CVE-2026-125066

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak CLJR decoder in libavcodec/cljrdec.c because decodeframe ignores initgetbits failure. Attackers can supply a crafted AVI file with a 2^28-byte CLJR frame that overflows the bit count, causing reads...

SUSE CVE-2026-125067

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vbledecodeframe in libavcodec/vble.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435452-byte VBLE frame, causing reads from a NULL bit reader buffer that...

VLC_CVE-2021-25804_Analysis

An AVI file can have multiple tracks. For example an audio track and a video track. In order to parse an arbitrary number of tracks VLC first must determine if a given track is finished and playable. Two variables are set up with this purpose in mind. Both named itrack. The variable psys...

VLC_CVE-2021-25801_Analysis

CVE-2021-25801 Analysis The vulnerability stems from a failure to throughly check the type of chunk being passed to Parseindx when attempting to read a sub indx chunk, pointed to by a valid super indx chunk. else if pindx-iindextype == AVIINDEXOFINDEXES //this is the expected value for super inde...

Linux Distros Unpatched Vulnerability : CVE-2026-125097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a...

Linux Distros Unpatched Vulnerability : CVE-2026-125064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726decodeframe in libavcodec/g726.c because it ignores initgetbits failure on oversiz...

Linux Distros Unpatched Vulnerability : CVE-2026-125067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vbledecodeframe in libavcodec/vble.c because it ignores initgetbits failure on oversiz...

UBUNTU-CVE-2026-125197

FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...

UBUNTU-CVE-2026-125066

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak CLJR decoder in libavcodec/cljrdec.c because decodeframe ignores initgetbits failure. Attackers can supply a crafted AVI file with a 2^28-byte CLJR frame that overflows the bit count, causing reads...

UBUNTU-CVE-2026-125067

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vbledecodeframe in libavcodec/vble.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435452-byte VBLE frame, causing reads from a NULL bit reader buffer that...

CVE-2026-125067

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vbledecodeframe in libavcodec/vble.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435452-byte VBLE frame, causing reads from a NULL bit reader buffer that...

UBUNTU-CVE-2026-125184

FFmpeg 6.1 through 9.0.2 contains an information disclosure vulnerability in the CamStudio decoder libavcodec/cscd.c that copies uninitialized heap memory into decoded frames when decompressed payloads are short. Attackers can supply a crafted AVI with a CSCD stream whose LZO or zlib frames...

UBUNTU-CVE-2026-125178

FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdscloadcursor in libavcodec/tdsc.c, which stores cursor dimensions before validating them. Attackers can supply a crafted AVI file with oversized TDSC cursor dimensions so tdscpaintcursor reads past the cursor buffer,...

UBUNTU-CVE-2026-125064

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726decodeframe in libavcodec/g726.c because it ignores initgetbits failure on oversized packets. Attackers can supply a crafted AVI file with a 268435392-byte G.726 audio chunk to make the decoder read from a NULL buffer,...

UBUNTU-CVE-2026-125097

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in rawdecode in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT files with truncated low bit depth rawvideo packets...

CVE-2026-125197

FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...

CVE-2026-125178

FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdscloadcursor in libavcodec/tdsc.c, which stores cursor dimensions before validating them. Attackers can supply a crafted AVI file with oversized TDSC cursor dimensions so tdscpaintcursor reads past the cursor buffer,...