heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

Brotli-Node.js-CVE-2026-111497-Broccoli2Shell-Node2Shell-HTTP2Shell-

CVE-2026-111497: Google Brotli 디코더 Block-Switch 반환값 미검사로 인한 Out-of-Bounds Write Node2Shell / HTTP2Shell / Broccoli2Shell -9.8-red Last verified: 2026-11-04 KST. Each figure is listed only if confirmed from the sources in the References below; where values differ between sources, all are listed...

CVE-2026-125712

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

CVE-2026-125712

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

Linux Distros Unpatched Vulnerability : CVE-2026-125193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold...

Linux Distros Unpatched Vulnerability : CVE-2026-125172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevdreceiveframe in libavcodec/libxevd.c that fails to validate NAL unit length prefixes...

CVE-2026-121292

A vulnerability in EOS allows an attacker to provide a malformed Error Report , triggering an out-of-bounds read beyond packet boundaries. This flaw can result in the termination of the RPKI agent or the exposure of unintended memory contents via logging. Specific details regarding affected versi...

CVE-2026-125712

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

DEBIAN-CVE-2026-125712

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

EUVD-2026-120881

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

CVE-2026-125712 Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

CVE-2026-125712 Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

CVE-2026-125712

A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer,...

UBUNTU-CVE-2026-125172

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevdreceiveframe in libavcodec/libxevd.c that fails to validate NAL unit length prefixes against remaining packet data. Attackers can supply crafted EVC media with oversized 4-byte NAL length prefixes, causing libxevd to read...

UBUNTU-CVE-2026-125193

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to cras...

CVE-2026-125193

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to cras...

PT-2026-141582

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-base affected versions not specified Description A flaw exists in the RTCP SDES packet parser. A remote sender capable of reaching an active media session can provide a malformed SDES entry with a declared length that...