Lucene search
+L

1341 matches found

NVD
NVD
added 2026/03/16 2:19 p.m.6 views

CVE-2026-2921

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS0.00867EPSS
SaveExploits0References22
OSV
OSV
added 2026/03/16 2:19 p.m.9 views

UBUNTU-CVE-2026-2921

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS6.3AI score0.00867EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/03/13 8:41 p.m.3 views

CVE-2026-2921 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS6.4AI score0.00867EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/13 8:41 p.m.8 views

CVE-2026-2921 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS7.7AI score
SaveExploits0References24
Snyk
Snyk
added 2026/03/13 8:41 p.m.17 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the RIFF parser when handling palette data in AVI files. An attacker can execute arbitrary code by convincing a user to open a specially crafted AVI file with an application linked against the affected...

8.4CVSS7.5AI score0.00867EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/13 8:41 p.m.9 views

CVE-2026-2921

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS6.4AI score0.00867EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/13 8:41 p.m.83 views

CVE-2026-2921

GStreamer RIFF palette integer overflow (CVE-2026-2921) in AVI file handling allows arbitrary code execution in affected builds. Root cause: insufficient validation of palette data leading to an integer overflow before memory write. Affected components: RIFF/AVI palette handling within GStreamer ...

7.8CVSS7.7AI score0.00867EPSS
SaveExploits0References22Affected Software1
Debian CVE
Debian CVE
added 2026/03/13 8:41 p.m.11 views

CVE-2026-2921

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS8.5AI score0.00867EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/03/13 8:41 p.m.7 views

CVE-2026-2921

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending o...

7.8CVSS6.4AI score0.00867EPSS
SaveExploits0References22
Circl
Circl
added 2026/03/13 12:00 a.m.10 views

CVE-2025-14811

creationtimestamp| type| source ---|---|--- 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0292/...

5.9CVSS7.1AI score0.00205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/03/06 12:00 a.m.13 views

GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of palette...

7.8CVSS6.2AI score0.00867EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/18 10:16 p.m.12 views

CVE-2019-25362

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

9.8CVSS0.00653EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/02/18 9:55 p.m.35 views

CVE-2019-25362 WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

9.8CVSS0.00653EPSS
SaveExploits1References5
NVD
NVD
added 2026/02/11 9:16 p.m.23 views

CVE-2020-37183

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload in the License Name input field to trigger a buffer overflow...

9.8CVSS0.00419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.23 views

PT-2026-7681

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload in the License Name input field to trigger a buffer overflow...

9.8CVSS6.5AI score0.00419EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.7 views

MiracleLinux 9 : gstreamer1-plugins-good-1.18.4-6.el9 (AXSA:2023-5649:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5649:01 advisory. gstreamer-plugins-good: Potential heap overwrite in gstmatroskademuxaddwvpkheader CVE-2022-1920 gstreamer-plugins-good: Heap-based buffer overflow i...

7.8CVSS5.9AI score0.00497EPSS
SaveExploits7References8
CNVD
CNVD
added 2026/01/19 12:00 a.m.16 views

GPAC avi_parse_input_file function heap buffer overflow vulnerability

GPAC is an open source multimedia framework. GPAC has a heap buffer overflow vulnerability that stems from the aviparseinputfile function failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...

6.5CVSS6.1AI score0.00316EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-70299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file. CVE-2025-70299 Note...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2026/01/15 6:16 p.m.8 views

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

6.5CVSS5.9AI score0.00316EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/15 12:00 a.m.30 views

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

0.00316EPSS
SaveExploits1References1
Rows per page
Query Builder