CVE-2026-90577

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::PacketIter::init

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6331592625422336 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id...

htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5098931189776384 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x78e01cee57d2 Crash...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_decode_utf8__

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=4946438107496448 Project: md4c Fuzzing Engine: afl Fuzz Target: fuzz-mdhtml Job Type: aflasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a9931de00f7 Crash State:...

DEBIAN-CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

UBUNTU-CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783 MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser , caused by integer wraparound in 32-bit arithmetic . An attacker can craft a malicious AVI file with oversized entry counts, triggering an undersized heap allocation that overflows whe...

EUVD-2026-77010

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783 MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

MGASA-2026-0398 Updated ffmpeg package fixes security vulnerabilities

Out-of-Bounds Write in RASC Decoder decodedlta. CVE-2026-58049 Heap Buffer Overflow via VobSub Subtitle Demuxer. CVE-2026-64830 Double-Free in NVDEC Hardware Decoder via nvdec.c. CVE-2026-64832 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c. CVE-2026-64833 Infinite Loop DoS via RTP/ASF Demuxer...

libyal:libvsgpt_partition_fuzzer: Heap-buffer-overflow in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6082663170244608 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf4e00651 Crash State:...

CVE-2026-38332

TinyEXIF before 1.1.0 is affected by a heap-based buffer over-read in the EntryParser::Fetch methods, triggered via a crafted SubjectArea length in EXIF data. The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) with a local attack vector, high complexity, no privileges required, and a low ava...

CVE-2026-38332

TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length...

PT-2026-90858

Name of the Vulnerable Software and Affected Versions MKVToolNix versions prior to 101.0-2.1 Description A heap buffer overflow exists in the bundled avilib library's ODML superindex parser. This occurs due to integer wraparound in 32-bit arithmetic, where a malicious AVI file containing oversize...