CVE-2026-52717

A memory corruption vulnerability was found in GStreamer's gst-libav plugin. The gstffmpegpipeclose function incorrectly calls gfree on a pointer to an embedded struct member that was never heap-allocated. A remote attacker could trick a user into opening a specially crafted media file, causing t...

CVE-2026-72299

creationtimestamp| type| source ---|---|--- 2026-08-17 10:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbj7kku7s2y...

CVE-2026-72200

creationtimestamp| type| source ---|---|--- 2026-08-17 08:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbciwsrdz2e 2026-08-20 08:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiro6xbee2y...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

PT-2026-76826

Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double...

The vulnerability of the rga_buf_init() function in the drivers/media/platform/rockchip/rga/rga-buf.c driver for multimedia devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rgabufinit function in the drivers/media/platform/rockchip/rga/rga-buf.c file of the Linux multimedia device driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

The vulnerability in the driver/media/i2c/ccs/ccs-core.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/media/i2c/ccs/ccs-core.c component of the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the kernel component drivers/media/pci/cx23885/cx23885-alsa.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the “drivers/media/pci/cx23885/cx23885-alsa.c” component in the Linux operating system kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `rockchip_vpu981_av1_dec_init()` function in the driver/media/platform/verisilicon/rockchip_vpu981_hw_av1_dec.c file of the Linux operating system’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipvpu981av1decinit function in the driver/media/platform/verisilicon/rockchipvpu981hwav1dec.c file of the Linux operating system’s multimedia device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to...

CVE-2026-13712

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

CVE-2026-15384

The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops attachment images; its only guard passes for any logged-in user. A subscriber-level user can therefore supply an arbitrary attachment ID and...

CVE-2026-19717

The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 lacks authorisation checks on certain REST API endpoints, allowing unauthenticated attackers to enumerate and retrieve the title, type, size and URL of all media attachments, including unpublished folders. No in-the-wild ...

CVE-2026-13712 Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

CVE-2026-13712

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

EUVD-2026-59909

The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator,...

EUVD-2026-59910

The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops attachment images; its only guard passes for any logged-in user. A subscriber-level user can therefore supply an arbitrary attachment ID and...

CVE-2026-15384 Manual Image Crop < 1.15 - Subscriber+ Arbitrary Attachment Image Overwrite via IDOR

The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the authenticated AJAX action that crops attachment images; its only guard passes for any logged-in user. A subscriber-level user can therefore supply an arbitrary attachment ID and...

CVE-2026-15384

The Manual Image Crop WordPress plugin before 1.15 contains an IDOR (Insecure Direct Object Reference) vulnerability in its authenticated AJAX crop action. The endpoint performs no capability check or nonce verification, allowing any subscriber-level user to supply an arbitrary attachment ID and ...

CVE-2026-13712

Divi WordPress theme versions 5.0 through 5.8.1 is vulnerable to contributor-level stored XSS via the Social Media Follow module's Skype URL field; malicious JavaScript stored by a low-privileged user executes when an administrator views the post. CVSS 5.4 medium. Patch to version 5.9.0. No in-th...