1173 matches found
CVE-2026-8461-EXP
CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING Dieses Repository enthält einen funktionierenden Exploit-PoC für eine Heap-Korruptions-Schwachstelle. Es ist ausschließlich für autorisierte Sicherheitsforschung, CTF-Kontexte und defensive Analysen bestimmt. Verwenden Sie e...
Astra Linux – Vulnerability in ffmpeg
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service...
Astra Linux – Vulnerability in ffmpeg
The decodeframe function in libavcodec/exr.c in FFmpeg 4.3.1 has a buffer overflow due to errors in calculating when to perform memset zero operations...
Astra Linux – Vulnerability in ffmpeg
FFmpeg 4.2 is affected by a divide-by-zero issue through the libavcodec/lpc.h library, which allows a remote malicious user to cause a Denial of Service attack...
ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media (moderate)
ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11545-1 Rating: moderate Cross-References: CVE-2026-58049 CVE-2026-64833 CVE-2026-64834 CVE-2026-65703 CVE-2026-65704 CVE-2026-65705 CVE-2026-65706 CVE-2026-66036 CVE-2026-66037 CVSS scores: CVE-2026-58049 SUSE : 8....
OPENSUSE-SU-2026:11545-1 ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed...
ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media (moderate)
ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11515-1 Rating: moderate Cross-References: CVE-2025-10256 CVE-2025-1594 CVE-2025-9951 CVE-2026-12706 CVE-2026-30997 CVE-2026-8461 CVSS scores: CVE-2025-10256 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H...
OPENSUSE-SU-2026:11515-1 ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream
A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the capacity check in dvbsubparse in libavcodec/dvbsubparser.c. An attacker can trigger an out-of-bounds heap write and potential code execution by supplying a crafted WTV file that drives the bufsize ...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via the screenpressodecodeframe function in libavcodec/screenpresso.c. An attacker can recover sensitive heap contents by supplying a crafted SPV1 packet whose zlib payload decompresses to fewer bytes than ...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via the rsccdecodeframe path in libavcodec/rscc.c. An attacker can disclose heap memory contents by supplying a crafted RSCC video file whose compressed tile decompresses to fewer bytes than the tile geomet...
CVE-2026-70628 FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard...
Linux Distros Unpatched Vulnerability : CVE-2026-64835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers...
ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder
A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...
PT-2026-63441
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff nvdec start frame sep ref error path...
Linux Distros Unpatched Vulnerability : CVE-2014-5271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x...
JLSEC-2026-643
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c...
JLSEC-2026-653 An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV...
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg befor...