CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the irishfigen1sessionunsetbuffers function in the drivers/media/platform/qcom/iris/irishfigen1command.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow...

PUB-A-454322925

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-449160647

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-469414216

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ALSA-2026:61241 Moderate: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref CVE-2026-14324 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...

Linux drivers/media/platform/qcom/camss/camss-vfe-480.c Heap Buffer

The vulnerability of the vfeisr function in the drivers/media/platform/qcom/camss/camss-vfe-480.c driver for Linux multimedia devices is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

em28xx_v4l2_open() Function Use-After-Free

The vulnerability of the em28xxv4l2open function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to...

ROS-20260821-73-0006

The vulnerability of the bufferprepare function in the driver/media/pci/cx23885/cx23885-core.c file of the Linux operating system’s multimedia device driver library is related to the dereferencing of pointers due to lack of checking of the return value. Exploiting this vulnerability could allow a...

RHSA-2026:54665 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54664 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:54659 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

Bulletin has no description...

RHSA-2026:53452 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2026:53451 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

CVE-2026-67290

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted media data to a connected client. This malformed data can trigger a heap out-of-bounds read vulnerability within the TSMF FFmpeg decoder, leading to the client application crashing. This can...

JLSEC-2026-1185 FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability...

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytesperpacket value. Attackers can craft a CAF file with oversized bytesperpack...

UBUNTU-CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...