vvdecapp readAlf Heap Buffer Overflow DoS

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

mackron dr_libs dr_mp3 drmp3_init_internal out-of-bounds read vulnerability

Summary A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versions The...

CVE-2026-125104

A flaw was found in FFmpeg. A memory exhaustion issue can occur in the APE Monkey's Audio decoder when decoding specially crafted legacy APE audio files due to a failure to enforce the sample limit on frame sizes. This vulnerability can lead to an excessive consumption of memory resources,...

CVE-2026-125073

A flaw was found in FFmpeg. A CPU exhaustion issue can occur in the IMC and IAC audio decoders when decoding specially crafted audio files due to a failure to handle negative bit budgets. This vulnerability can lead to an excessive consumption of CPU resources, eventually resulting in a denial of...

krb5: Unauthenticated KDC DoS based on ASN.1 decoder read overrun

In all released versions of MIT krb5, an unauthenticated attacker can cause a KDC process to perform a large read overrun, likely causing the process to terminate...

krb5: Unauthenticated KDC DoS based on ASN.1 decoder read overrun

In all released versions of MIT krb5, an unauthenticated attacker can cause a KDC process to perform a large read overrun, likely causing the process to terminate...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2026-442_

CVE protobuf.js CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44294, CVE-2026-44295 - protobuf.js ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testin...

Brosec

Overview tl;dr Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to genera...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

CLEANSTART-2026-AG75681 buffer overflow vulnerability in the Brotli decoder (c/dec/decode

Security vulnerability affects the tempo package. A buffer overflow vulnerability in the Brotli decoder c/dec/decode...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with mode1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

CVE-2025-31200

CVE-2025-31200: CoreAudio APAC Channel Remapping Buffer Overflow Vulnerability Overview CVE-2025-31200 is a buffer overflow vulnerability in Apple's CoreAudio framework affecting the Apple Positional Audio Codec APAC decoder. The bug exists in the APACChannelRemapper::Process function within...

Security update for zvbi

This update for zvbi fixes the following issue: CVE-2026-110654: out-of-bounds write vulnerability in the Teletext decoder bsc1285571. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run...

SUSE CVE-2026-125068

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decodeframe in libavcodec/bink.c ignores initgetbits failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for...

SUSE CVE-2026-125069

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

SUSE CVE-2026-125072

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mpdecodeframe in libavcodec/mpegaudiodectemplate.c because initgetbits failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the libavcodec API, causing rea...