CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

Astra Linux – Vulnerability in ffmpeg

The decodeframe function in libavcodec/exr.c in FFmpeg 4.3.1 has a buffer overflow due to errors in calculating when to perform memset zero operations...

Astra Linux – Vulnerability in ffmpeg

FFmpeg 4.2 is affected by a divide-by-zero issue through the libavcodec/lpc.h library, which allows a remote malicious user to cause a Denial of Service attack...

Astra Linux – Vulnerability in ffmpeg

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service...

Astra Linux – Vulnerability in ffmpeg

FFmpeg 4.2 is affected by a divide-by-zero issue through the libavcodec/aacpsy.c module, which allows a remote malicious user to cause a Denial of Service attack...

CLEANSTART-2024-PF68128 improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc

Security vulnerability affects the ffmpeg4 package. An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc...

CLEANSTART-2024-CH92586 decode_init function in libavcodec/utvideodec

Security vulnerability affects the ffmpeg4 package. The decodeinit function in libavcodec/utvideodec...

CLEANSTART-2024-UD93044 decode_init function in libavcodec/utvideodec

Security vulnerability affects the ffmpeg4 package. The decodeinit function in libavcodec/utvideodec...

CLEANSTART-2024-VP47003 decode_plane function in libavcodec/utvideodec

Security vulnerability affects the ffmpeg4 package. The decodeplane function in libavcodec/utvideodec...

CLEANSTART-2024-FX25707 libavcodec in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. libavcodec in FFmpeg 4...

CLEANSTART-2024-IG86990 inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec

Security vulnerability affects the ffmpeg4 package. An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec...

CLEANSTART-2024-XA29190 In libavcodec in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. In libavcodec in FFmpeg 4...

CLEANSTART-2024-YZ84147 studio profile decoder in libavcodec/mpeg4videodec

Security vulnerability affects the ffmpeg4 package. The studio profile decoder in libavcodec/mpeg4videodec...

CLEANSTART-2024-JG05415 libavcodec/hevcdec

Security vulnerability affects the ffmpeg4 package. libavcodec/hevcdec...

CLEANSTART-2024-XY41143 cbs_jpeg_split_fragment in libavcodec/cbs_jpeg

Security vulnerability affects the ffmpeg4 package. cbsjpegsplitfragment in libavcodec/cbsjpeg...

CLEANSTART-2024-XU01734 decode_frame in libavcodec/exr

Security vulnerability affects the ffmpeg4 package. decodeframe in libavcodec/exr...

CLEANSTART-2024-LU46307 dwa_uncompress in libavcodec/exr

Security vulnerability affects the ffmpeg4 package. dwauncompress in libavcodec/exr...

CLEANSTART-2024-LR52938 libavcodec/dnxhddec

Security vulnerability affects the ffmpeg4 package. libavcodec/dnxhddec...

FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder

A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...