6074 matches found
ECHO-B0AE-FACC-5AE1 The CVE text claims arbitrary code execution "via creating a crafted AAC file" in libx264. libx264 is an H.264 encoder and never parses AAC or any other container or audio input. The only reference, x264 issue #75, is a LeakSanitizer report from running FFmpeg's configure checks with --enable-libx264: when x264_encoder_open() fails, its fail: path frees the encoder without x264_param_cleanup(), so the copied parameter strings (a few hundred bytes) leak once. There is no out-of-bounds access, no use-after-free and no attacker-controlled data involved. FFmpeg closed the original ticket as invalid and pointed at the leak in libx264. The record was assigned by MITRE with no CNA score; the 9.8 comes from CISA-ADP. Debian rates it unimportant in every suite ("Negligible security impact, usually only used for short-lived processes"), and no x264 commit since the report touches this path, so there is nothing to backport.
Bulletin has no description...
ECHO-F55E-6DD0-D4B5
Bulletin has no description...
ECHO-4EBF-BC2C-395E
Bulletin has no description...
ECHO-0D17-9796-549F
Bulletin has no description...
ECHO-13F8-D7EC-BFEF
Bulletin has no description...
ECHO-60B1-7D52-5AA4
Bulletin has no description...
ECHO-C993-31DB-A8BF
Bulletin has no description...
ECHO-0BD2-8B5E-2B5A SoupCache ignores the HTTP Vary header when reusing cached responses. The vulnerable path is only reachable when a client explicitly enables the optional on-disk SoupCache feature (soup_session_add_feature with SoupCache) AND acts as a shared/multi-user HTTP proxy — neither applies to Echo's use of libsoup3 as a client library. No upstream fix exists (a TODO in soup_cache_has_response(); issue #453 was closed as a duplicate of the still-open upstream issue #112). Debian rates it no-dsa, Minor. https://security-tracker.debian.org/tracker/CVE-2025-9901
Bulletin has no description...
ECHO-668F-C580-6F98
Bulletin has no description...
ECHO-70E5-AB74-3FEC
Bulletin has no description...
ECHO-9B16-DC87-042E
Bulletin has no description...
ECHO-9DAD-2609-2B54
Bulletin has no description...
ECHO-784E-1E87-235F
Bulletin has no description...
ECHO-8C6A-E78A-B98A
Bulletin has no description...
ECHO-334B-1C04-AA69
Bulletin has no description...
ECHO-C252-AE80-9DB0
Bulletin has no description...
ECHO-572D-1F26-2B99
Bulletin has no description...
ECHO-B09A-BD3C-2713
Bulletin has no description...