7896 matches found
Astra Linux – Vulnerability in ffmpeg5
It was discovered that FFmpeg version n6.1 contains a heap buffer overflow vulnerability in the drawblockrectangle function of libavfilter/vfcodecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS attack through crafted inputs...
CVE-2026-8753 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection
A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInfo of the file /workspace/source-code/plugins/fileThumb/lib/VideoResize.class.php of the component fileThumb Plugin. The manipulation of the argument ffmpegBin leads to command...
CVE-2026-8753
A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInfo of the file /workspace/source-code/plugins/fileThumb/lib/VideoResize.class.php of the component fileThumb Plugin. The manipulation of the argument ffmpegBin leads to command...
CVE-2026-8753 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection
A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInfo of the file /workspace/source-code/plugins/fileThumb/lib/VideoResize.class.php of the component fileThumb Plugin. The manipulation of the argument ffmpegBin leads to command...
EUVD-2026-30698
A security vulnerability has been detected in kalcaddle Kodbox up to 1.64. This issue affects the function parseVideoInfo of the file /workspace/source-code/plugins/fileThumb/lib/VideoResize.class.php of the component fileThumb Plugin. The manipulation of the argument ffmpegBin leads to command...
PT-2026-41543
Name of the Vulnerable Software and Affected Versions kalcaddle Kodbox versions prior to 1.65 Description Command injection is possible via remote attack in the fileThumb Plugin. The issue exists within the parseVideoInfo function located in the...
openSUSE 16 Security Update : ffmpeg-4 (openSUSE-SU-2026:20726-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20726-1 advisory. Changes in ffmpeg-4: - CVE-2026-40962: Fixed inadequate CENC subsample bounds checks that could lead to an integer overflow bsc1262237. Tenable has...
[SECURITY] [DSA 6276-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6276-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 15, 2026 https://www.debian.org/security/faq -...
Security update for ffmpeg-4 (moderate)
openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20726-1 Rating: moderate References: bsc1262237 Cross-References: CVE-2026-40962 CVSS scores: CVE-2026-40962 SUSE : 4.9...
Debian dsa-6276 : ffmpeg - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-6276 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6276-1 [email protected] https://www.debian.org/security/ Moritz...
[SECURITY] [DSA 6268-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6268-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2026 https://www.debian.org/security/faq -...
Debian dsa-6268 : ffmpeg - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6268 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6268-1 [email protected] https://www.debian.org/security/ Moritz...
ffmpeg-4-4.4.6-12.1 on GA media (moderate)
ffmpeg-4-4.4.6-12.1 on GA media Announcement ID: openSUSE-SU-2026:10767-1 Rating: moderate Cross-References: CVE-2026-40962 CVSS scores: CVE-2026-40962 SUSE : 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2026-40962 SUSE : 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N...
OPENSUSE-SU-2026:20726-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - CVE-2026-40962: Fixed inadequate CENC subsample bounds checks that could lead to an integer overflow bsc1262237...
OPENSUSE-SU-2026:10767-1 ffmpeg-4-4.4.6-12.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.6-12.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10768-1 ffmpeg-7-7.1.3-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.3-3.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16 Security Update : ffmpeg-4 (openSUSE-SU-2026:20710-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20710-1 advisory. Changes in ffmpeg-4: - CVE-2025-59728: Fixed out-of-bounds NUL-byte write when calculating the content path in handling of MPEG-DASH manifests...
OPENSUSE-SU-2026:20710-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - CVE-2025-59728: Fixed out-of-bounds NUL-byte write when calculating the content path in handling of MPEG-DASH manifests bsc1251137. - CVE-2025-7700: Fixed a NULL Pointer Dereference in the ALS Decoder bsc1246790 -...
