CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

118 matches found

EUVD•added 2026/06/19 10:55 a.m.•8 views

EUVD-2026-38004

A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decodemove function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by...

6.5CVSS6AI score0.00245EPSS

Exploits0References4

CVE•added 2026/06/19 10:55 a.m.•29 views

CVE-2026-12706

CVE-2026-12706 , in FFmpeg’s RASC video decoder, is a heap use-after-free in the decode_move() path. The decoder initializes a read pointer into a decompressed buffer, but the buffer is reallocated during move-table processing, leaving the pointer dangling. An attacker could craft an AVI file wit...

6.5CVSS6AI score0.00245EPSS

Exploits0References4

Positive Technologies•added 2026/06/19 12:0 a.m.•14 views

PT-2026-50871

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A use-after-free issue exists in the RASC video decoder. The decode move function initializes a read pointer into a decompressed buffer; however, a subsequent reallocation of that buffer durin...

6.5CVSS6AI score0.00245EPSS

Exploits0References8

SUSE CVE•added 2026/04/06 11:25 p.m.•4 views

SUSE CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

5.6CVSS5.8AI score0.00178EPSS

Exploits1References3

EUVD•added 2026/04/06 12:32 p.m.•4 views

EUVD-2026-19219

5.6CVSS5.9AI score0.00178EPSS

Exploits1References4

Positive Technologies•added 2026/03/24 12:0 a.m.•6 views

PT-2026-27379

WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers can create a specially crafted AVI file with an oversized buffer and load it through the Convert to iPhone function ...

6.9CVSS6AI score0.00173EPSS

Exploits0References5

Tenable Nessus•added 2026/01/16 12:0 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-70299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file. CVE-2025-70299 Note...

6.5CVSS5.5AI score0.00304EPSS

Exploits1References3