Alibaba Cloud Linux 3 : 0270: gstreamer1-plugins-bad-free (ALINUX3-SA-2026:0270)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0270 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-19387: A heap out-of-bounds write...

UBUNTU-CVE-2026-75144

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer libavformat/rtpencvc2hq.c that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a...

CVE-2026-75146

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer libavformat/dashdec.c. When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the...

Mozilla Firefox Conditional Contested Memory Misreference Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox's creation of a media decoding thread in the shutdown process can lead to a race condition vulnerability that can lead to memory misreferences, which allows remote attackers to exploit the vulnerability to build malicious WEB...