CVE-2026-65705 FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

CVE-2026-65703 FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdscparsetdsf function fails to unreference the...

CVE-2026-65703

FFmpeg versions 2.7–8.1.2 are affected by an out-of-bounds write in the TDSC video decoder. A crafted AVI file that changes frame dimensions across TDSF frames can trigger heap corruption due to tdsc_parse_tdsf() not unreferencing the existing reference frame before av_frame_get_buffer(), allowin...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out-of-bounds memory write via a crafted video file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Skia in Google Chrome prior to version 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write via a crafted print file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.168, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: High...

glibc security update

An update is available for glibc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

RLSA-2026:42952 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

PT-2026-64154

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.7 through 8.1.2 Description An out-of-bounds write issue exists in the TDSC video decoder. A remote attacker can cause heap corruption by providing a specially crafted AVI file that alters frame dimensions across TDSF frames...

PT-2026-64157

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.0 through 8.1.2 Description An out-of-bounds write exists in the vf swaprect video filter. This occurs when the filter frame function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes...

PT-2026-64193

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description An out-of-bounds write occurs in the Codecs component, which could allow a remote attacker to perform a sandbox escape by using a specially crafted HTML page. A sandbox escape is a...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in adxdecodeframe in libavcodec/adxdec.c. An attacker can trigger memory corruption or a crash by supplying a crafted ADX or AAX audio stream that delivers AVPKTDATANEWEXTRADATA mid-stream and changes the channel...

SUSE-SU-2026:3199-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk imagebsc1268145. - kpartx: missing bounds check can lead to a DASD VOL1 unbounded array write via a crafted DA...

SUSE CVE-2026-16413

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-53910

diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds. When processing crafted...

RLSA-2026:42694 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

SUSE-SU-2026:22901-1 Security update for vim

This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary Code Execution via C Omni-Completion...

glibc security update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...