PT-2026-141014

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in the dts2pts bitstream filter that allows attackers to exhaust CPU through unbounded per-packet POC node allocation. Attackers can supply a crafted H.264 packet with many slices of alternating picture order counts,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, resulting in fsinmb also being 0. This causes a division by zero when calculating numdpbbuffer ...

CLEANSTART-2024-PG49557 out-of-bounds read can occur when decoding H264 video

Security vulnerability affects the firefox-esr package. An out-of-bounds read can occur when decoding H264 video...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146319 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16...

CVE-2026-80907

A flaw was found in the AMD GPU driver within the Linux kernel. This vulnerability involves an incorrect calculation of the minimum size for the Unified Video Decoder UVD decoded picture buffer DPB when processing H264 video. Instead of using the actual number of references from the video's decod...

Astra Linux – vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.27.0, FreeRDP clients that negotiate RDPGFX AVC444 with an H.264 decoder backend calculated the intermediate YUV444 allocation size in libfreerdp/codec/h264.c using 32-bit multiplication in avc444ensurebuffer. A...

PT-2026-117533

A NULL pointer dereference in the avpriv h264 has num reorder frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

libfreerdp H264 Buffer Overflow RCE

The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SUSE CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

AZL-99648 CVE-2026-80907 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907 drm/amdgpu: Fix UVD dpb min size calculation for H264

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907

This CVE affects the drm/amdgpu driver in the Linux kernel, specifically the UVD (Unified Video Decoder) subsystem used for hardware-accelerated H.264 decoding. The bug is an incorrect DPB (Decoded Picture Buffer) minimum size calculation : the code derived the number of reference frames from the...

EUVD-2026-71666

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907 drm/amdgpu: Fix UVD dpb min size calculation for H264

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

PT-2026-91799

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

CVE-2026-80907: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856...

Linux Distros Unpatched Vulnerability : CVE-2026-80907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level...

PT-2026-86198

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component regarding the UVD dpb minimum size calculation for H264. The system incorrectly uses a maximum value derived from the level instead of the...