Lucene search
+L

2445 matches found

EUVD
EUVD
•added 2026/07/06 2:15 a.m.•29 views

EUVD-2026-41801

A flaw has been found in GPAC 26.02.0. This affects the function nhmldumpsendframe of the file src/filters/writenhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be...

4.8CVSS5.5AI score0.0016EPSS
SaveExploits0References7
Redos
Redos
•added 2026/07/06 12:00 a.m.•14 views

ROS-20260706-73-0051

The vulnerability of the dasherprocess function in the MP4Box packaging tool of the GPAC multimedia platform relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•15 views

ROS-20260706-73-0066

The vulnerability of the gfodfac4cfgdsiv1 function, implemented by the MP4Box component of the GPAC multimedia platform, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00143EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•12 views

ROS-20260706-73-0054

The vulnerability of the m2tsdmxsendpacket function, implemented by the MP4Box packaging tool of the GPAC multimedia platform, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00158EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/01 12:00 a.m.•11 views

The vulnerability in the functions max9286_init() and max9286_probe() of the driver module drivers/media/i2c/max9286.c, a driver for supporting multimedia devices in the Linux operating system. This vulnerability allows an attacker to access protected information or cause service failures.

The vulnerability of the functions max9286init and max9286probe in the driver module “drivers/media/i2c/max9286.c” of the Linux operating system’s multimedia device support driver is related to state management errors. Exploiting this vulnerability can allow an attacker to access protected...

7.1CVSS6.7AI score0.00293EPSS
SaveExploits0References7Affected Software1
Redos
Redos
•added 2026/06/30 12:00 a.m.•22 views

ROS-20260630-73-0018

The vulnerability of the bdispprobe function in the drivers/media/platform/st/sti/bdisp/bdisp-v4l2.c file of the Linux kernel’s multimedia device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.3AI score0.00149EPSS
SaveExploits0
Redos
Redos
•added 2026/06/30 12:00 a.m.•16 views

ROS-20260630-73-0009

The vulnerability of the hi846initcontrols function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...

5.5CVSS6.2AI score0.00145EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/30 12:00 a.m.•16 views

The vulnerability of the decode_dlta() function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the decodedlta function in the libavcodec/rasc.c file of the RASC video decoder from the FFmpeg multimedia library is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

9CVSS8.3AI score0.00496EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/06/26 12:00 a.m.•14 views

The vulnerability of the hi846_set_ctrl() function in the drivers/media/i2c/hi846.c module of the Linux operating system’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the hi846setctrl function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver framework is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00154EPSS
SaveExploits0References8Affected Software2
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•20 views

CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct sndseqevent into a stack temporary, rewriting source and destination, and dispatching the temporary to...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References17
Redos
Redos
•added 2026/06/25 12:00 a.m.•17 views

ROS-20260625-73-0029

The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...

5.3CVSS6.6AI score0.0035EPSS
SaveExploits0
Redos
Redos
•added 2026/06/24 12:00 a.m.•11 views

ROS-20260624-73-0003

The vulnerability in gpac is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...

5.3CVSS6.3AI score0.00172EPSS
SaveExploits0
Redos
Redos
•added 2026/06/24 12:00 a.m.•11 views

ROS-20260624-73-0005

The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS7.2AI score0.00431EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/24 12:00 a.m.•41 views

The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform allows a hacker to execute arbitrary code.

The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious media file...

10CVSS7.8AI score0.01033EPSS
SaveExploits4References7Affected Software3
attackerkb
attackerkb
•added 2026/06/24 12:00 a.m.•16 views

CVE-2025-60468

GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service local. The component is: filtercore/filterpid.c L:574-580: function gffilterpidinstswapdeletetask improperly accesses freed objects...

5.7AI score0.0017EPSS
SaveExploits1References6
Fedora
Fedora
•added 2026/06/23 1:09 a.m.•22 views

[SECURITY] Fedora 44 Update: ffmpeg-8.1.2-1.fc44

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

7.5CVSS7.1AI score0.00728EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/06/20 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-8461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be...

8.8CVSS7.3AI score0.01033EPSS
SaveExploits4References3
EUVD
EUVD
•added 2026/06/15 9:30 p.m.•42 views

EUVD-2026-36756

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...

5.3AI score0.01767EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•30 views

gpac 缓冲区错误漏洞

GPAC MP4Box is a open-source multimedia packager developed by GPAC. It is primarily used for processing ISOBMF files such as MP4 and 3GP, but it can also be used for importing/exporting media from container files like AVI, MPG, MKV, and MPEG-2 TS. Version 2.4 of GPAC MP4Box contains a security...

7.5CVSS6.1AI score0.005EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:19 p.m.•20 views

CVE-2026-49202

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing CORS rules that allow cross-site theft...

8.8CVSS5.3AI score0.0045EPSS
SaveExploits0References1
Rows per page
Query Builder