CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING 이 PoC는 전적으로 AI에 의해 생성되었습니다. 사용법: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi 패치되지 않은 ffmpeg 버전은 baseline.avi를 처리할 때 충돌합니다...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV ヒープ OOB 書き込み PoC !WARNING このリポジトリには、ヒープ破壊の脆弱性に対する実動するエクスプロイト PoC が含まれています。 これは、許可されたセキュリティ研究、CTF コンテキスト、および防御的分析のみを目的としています。 自分が所有していないシステム、または明示的な書面による許可を得ていないシステムに対して使用しないでください。 影響を受けるバージョン: FFmpeg 8.0.1 MagicYUV デコーダー libavcodec/magicyuv.c プリミティブ: ヒ...

CVE-2024-53615

CVE-2024-53615 Karl Ward의 files.gallery v0.3.0 0.11.0에서 비디오 썸네일 렌더링 구성요소에 존재하는 명령 주입 취약점으로, 원격 공격자가 조작된 비디오 파일을 통해 임의 코드를 실행할 수 있습니다. 전제 조건: PATH에 ffmpeg가 있어야 함 config.php: 'allowupload' = true PHP 설정에서 exec가 활성화되어 있어야 함 취약점은 버전 0.9.12에서 가져온 다음 라인비디오 미리보기를 생성하는 부분에 있습니다: $cmd = $ffmpegpath . ' -s...

CVE-2026-30754

A flaw was found in FFmpeg. This memory corruption vulnerability occurs during the Real-time Transport Protocol RTP encoding of H.264/HEVC streams. A remote attacker could exploit this by providing a specially crafted input file, leading to a negative size parameter being passed to a memory copy...

CVE-2026-26833

CVE-2026-26833: thumbler의 OS 명령 주입 요약 thumbler 버전 1.1.2까지는 lib/thumbler.js의 thumbnail에서 OS 명령 주입이 가능합니다. 이 패키지는 input, output, time, size 값을 단일 ffmpeg 명령 문자열로 결합한 뒤 childprocess.exec로 해당 문자열을 실행합니다. 이러한 값 중 하나를 제어할 수 있는 공격자는 셸 구문을 주입하고 임의의 명령을 실행할 수 있습니다. 영향받는 제품 제품| 영향받는 버전| 수정 버전 ---|---|---...

practice-22-23

프로젝트 실행: ./script.sh GitHub 저장소 - https://github.com/LaCinquette/practice-22-23 진행 상황 1. 취약점을 찾기 위해 FFmpeg 프로젝트를 선택했습니다. 요구 사항을 충족하는 커밋을 찾았습니다: CWE-476 유형 - 널 포인터 역참조 2. 도커파일을 생성했습니다: 1. 기본 이미지로 Ubuntu 22.04 선택 2. 패키지 설치 및 기타 명령 중 명령줄 상호작용을 방지하기 위해 DEBIANFRONTEND=nointeractive 설정 3. 공식 위키에 명시된 필수...

PixelSmash

CVE-2026-8461 — PixelSmash CVE-2026-8461 の実用的な概念実証です。これは FFmpeg の MagicYUV デコーダにおける境界外書き込みです。脆弱な FFmpeg をソースからビルドするラボ用ハーネスと、ビデオプレーヤーのコンテキストでエクスプロイトを実演するために使用される小さな Qt プレーヤーが含まれています。 研究および教育目的のみ。所有していないシステムに対して使用しないでください。 クイックスタート git clone https://github.com/Shellmates/PixelSmash.git cd PixelSmas...

GHSA-7QC3-XQXJ-426P vulnerabilities

Vulnerabilities for packages: torchaudio-ffmpeg-tarballs...

CVE-2026-75144 vulnerabilities

Vulnerabilities for packages: torchaudio-ffmpeg-tarballs...

GHSA-MG5R-49W7-J3CV vulnerabilities

Vulnerabilities for packages: torchaudio-ffmpeg-tarballs...

CVE-2026-75143 vulnerabilities

Vulnerabilities for packages: torchaudio-ffmpeg-tarballs...

[SECURITY] Fedora 44 Update: ffmpeg-8.1.3-1.fc44

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora 44 : ffmpeg (2026-3e109a0c85)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3e109a0c85 advisory. Latest upstream bugfix release from 8.1 branch. Changes: https://code.ffmpeg.org/FFmpeg/FFmpeg/src/branch/release/8.1/Changelog . Tenable has...

Moderate: Red Hat Security Advisory: RHEL AI 3.0 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.0 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data

A flaw was found in FFmpeg. This vulnerability, stemming from an integer overflow and a subsequent out-of-bounds write during the processing of Common Encryption CENC subsample data, could allow a local attacker to potentially trigger information disclosure, data corruption, or a denial of servic...

ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter

A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the vfhqdn3d filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent...

ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...

FFmpeg: Denial of Service via crafted RTP/ASF stream

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...