29 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-106757)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106757 advisory. A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length...
OESA-2026-3650 gstreamer1-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106454)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106454 advisory. A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length...
TencentOS Server 4: gstreamer1-plugins-good (TSSA-2026:0948)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0948 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2026-70632
A flaw was found in FFmpeg. This out-of-bounds heap write vulnerability exists within the native GoPro CineForm HD CFHD decoder. A remote attacker can exploit this by providing a specially crafted AVI Audio Video Interleave file during stream analysis. This can lead to memory corruption and may b...
gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
EUVD-2026-57443
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
gpac:fuzz_probe_analyze: Crash in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5355164335931392 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN Crash Address: 0xfffffff400000000 Crash State: aviparseinputfi...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in str2ullong
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6074198366945280 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x78fe5d2eae59 Crash State:...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in str2ullong
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6709026821046272 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bf3a08a1d14 Crash State:...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4540609380810752 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7cac88d17ae6 Crash State:...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6435428038410240 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x79e6db5e0d70 Crash State...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5633939695009792 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x766d11f17dcc Crash State:...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in avi_parse_input_file
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5023398651822080 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address: 0x75b2248fa6c0 Crash State:...
PT-2024-6318 · Adobe · Media Encoder
Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 24.5, 23.6.8 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...
SUSE CVE-2022-1921
Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite...
UBUNTU-CVE-2022-1921
Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite...