CVE-2025-14174-analysis

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...

EntropicaPublic

March updates I need to move some work over from the private repos. The exploration into using massivly multheaded models with mixer and readout functions separated continues. Currently training up a Chinese TinyStories on a 3B-equivalent model that trains, easily, on an 8GB gpu. We're looking at...

Linux Distros Unpatched Vulnerability : CVE-2026-125248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames...

UBUNTU-CVE-2026-125248

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248

FFmpeg versions 9.0 through 9.0.2 are vulnerable to an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c. This flaw occurs when processing large frames, as it undersizes the float remap GPU buffer . An attacker can exploit this by supplying large GBRPF32 or GBRAPF32 images or videos. ...

CVE-2026-125248 FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

EUVD-2026-120198

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-125248 FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

PT-2026-141076

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc vulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger...

CVE-2026-125248: FFmpeg: FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c that undersizes the…

FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-boun...

CVE-2026-115913

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mmaudio.py and phi4mmutils.py uses eager attention by default, allowing a remote client to submit one legal long audio clip that causes MultiHeadedAttention.forwardattenti...

CVE-2026-115913

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mmaudio.py and phi4mmutils.py uses eager attention by default, allowing a remote client to submit one legal long audio clip that causes MultiHeadedAttention.forwardattenti...

vLLM resource management error vulnerability

Versions prior to vLLM 0.32.0 contain a resource management error vulnerability. This vulnerability arises because the Phi-4 multimodal audio encoder defaults to using eager attention in phi4mmaudio.py and phi4mmutils.py. A remote client can submit a valid long audio segment, causing the full...

CVE-2026-116181

A flaw was found in vllm. An authenticated remote attacker could cause a Denial of Service DoS or memory corruption by submitting requests containing invalid stop token identifiers. Because the application does not verify whether provided stop tokens fall within the model's vocabulary range,...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability caused by GPU memory corruption. This vulnerability may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability caused by GPU memory corruption. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome on Android versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from GPU memory corruption, allowing remote attackers to read memory within the sandbox through a specially crafted HTML page...

PYSEC-2026-4178 vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation

Summary Current vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through mediaiokwargs.video.videobackend, but engine GPU memory reservation is computed only from static startup configuration and VLLMVIDEOLOADERBACKEND. If the server starts with the default...

PT-2026-105921

Summary Current vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through media io kwargs.video.video backend, but engine GPU memory reservation is computed only from static startup configuration and VLLM VIDEO LOADER BACKEND. If the server starts with the default...