CVE-2026-30999 vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-30998 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-JJ28-P98R-MWQJ vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-83PH-9QXX-HFJX vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-JJ28-P98R-MWQJ vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-30998 vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-30999 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-83PH-9QXX-HFJX vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-30997 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-RG96-8JMP-9MWC vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-40962 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-48WR-P98V-9W5H vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-48WR-P98V-9W5H vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2026-40962 vulnerabilities

Vulnerabilities for packages: ffmpeg...

📄 thumbler 1.1.2 Command Injection

The thumbler package through version 1.1.2 contains a critical command injection vulnerability in the thumbnail function. User-supplied input parameters input, output, time, size are concatenated into a single ffmpeg command string and executed via childprocess.exec without proper sanitization. A...

SUSE CVE-2026-6385

A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds...

Mythos and Cybersecurity

Last week, Anthropic pulled back the curtain on Claude Mythos Preview, an AI model so capable at finding and exploiting software vulnerabilities that the company decided it was too dangerous to release to the public. Instead, access has been restricted to roughly 50 organizations--Microsoft, Appl...

FFmpeg <= 8.0.1 Multiple Vulnerabilities

The version of FFmpeg installed on the remote host is 8.0.1 or earlier. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

SUSE CVE-2026-40962

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC Common Encryption subsample data to libavformat/mov.c...

CVE-2026-40962

A flaw was found in FFmpeg. This vulnerability, stemming from an integer overflow and a subsequent out-of-bounds write during the processing of Common Encryption CENC subsample data, could allow a local attacker to potentially trigger information disclosure, data corruption, or a denial of servic...