46 matches found
PT-2026-99487
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562150738 Crash type: UNKNOWN WRITE Crash state: av1 cdef mse calc frame mt av1 cdef search encode with recode loop and filter...
Astra Linux – Vulnerability in ffmpeg, ffmpeg5
There is a heap-buffer-overflow write in jpeg2000dec FFmpeg that allows an attacker to potentially gain remote code execution or cause a denial of service through the JPEG2000’s channel definition cdef atom...
JLSEC-2026-648
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
PT-2026-56120
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
OPENSUSE-SU-2026:20855-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - Add check for the return value of avmallocarray to avoid potential NULL pointer dereference. CVE-2025-10256, bsc1249431 - Update to version 4.4.7: Codecs, filters and other various bugfixes aacenctns: clamp filter directi...
vlc:vlc-demux-dec-libfuzzer-nuv: Heap-buffer-overflow in dav1d_cdef_brow_8bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4743949838516224 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7bb582964b00 Crash State: dav1dcdefbrow8bpc...
EUVD-2015-4365
Malware in sbrugna...
EUVD-2025-27255
Malicious code in bioql PyPI...
SUSE CVE-2025-9951
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the getsiz function in jpeg2000dec.c. An attacker can execute arbitrary code or cause a crash by supplying a crafted JPEG2000 file containing a malicious cdef atom. Remediation Upgrade ffmpeg to version 8....
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the getsiz function in jpeg2000dec.c. An attacker can execute arbitrary code or cause a crash by supplying a crafted JPEG2000 file containing a malicious cdef atom. Remediation Upgrade ffmpeg to version 8....
CVE-2025-9951
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
CVE-2025-9951
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
DEBIAN-CVE-2025-9951
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
CVE-2025-9951
FFmpeg is affected by CVE-2025-9951 due to a heap-buffer-overflow in the JPEG 2000 decoder (jpeg2000dec) that can allow remote code execution or denial of service when processing certain JPEG2000 data. Multiple advisories (Debian DLA-4440, Astra Linux, Ubuntu USN-7830-1, and Nessus entries) enume...
CVE-2025-9951 Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
CVE-2025-9951 Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
CVE-2025-9951: Heap-based Buffer Overflow
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...
PT-2025-36736
Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A heap-buffer-overflow write exists in the jpeg2000dec component of FFmpeg. This issue could allow a remote attacker to potentially execute code or cause a denial of service through the...