CVE-2026-55331

A high-severity Remote Code Execution (RCE) vulnerability exists in the IP Multimedia Subsystem (Telephony) due to an out-of-bounds write caused by an incorrect bounds check. This flaw allows an attacker to execute arbitrary code without requiring additional execution privileges or user interacti...

EUVD-2026-78948

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92299

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An incorrect bounds check in the IP Multimedia Subsystem allows for an out-of-bounds write. This condition can be exploited to achieve remote code execution without requiring...

CVE-2026-58683: Improper Input Validation

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92349

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description An out-of-bounds write can occur due to improper input validation. This flaw allows for remote code execution without requiring additional execution privileges or user...

CVE-2026-55366: Protection Mechanism Failure

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55331: Buffer Copy without Checking Size of Input

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92305

Name of the Vulnerable Software and Affected Versions IP Multimedia Subsystem affected versions not specified Description A logic error in the code allows for an authentication bypass. This issue enables remote escalation of privilege without requiring additional execution privileges or user...

Astra Linux – Vulnerability in ffmpeg5

It was discovered that FFmpeg versions n5.1 to n6.1 contain an Off-by-one Error vulnerability in the libavfilter/avfshowspectrum.c file. This vulnerability allows attackers to cause a Denial of Service DoS attack through crafted inputs...

Astra Linux – Vulnerability in ffmpeg

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2, specifically in the libavcodec/getbits.h file, during the process of writing .mov files. This vulnerability may lead to memory corruption and other potential issues...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vffloodfill.c. This vulnerability may lead to memory corruption and other potential issues...

Astra Linux – Vulnerability in ffmpeg

Buffer overflow vulnerability in FFmpeg 4.2, located in the convolutiony10bit section of libavfilter/vfvmafmotion.c, which could allow a remote malicious user to cause a Denial of Service attack...

The vulnerability of the gf_hevc_read_sps_bs_internal() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ctts_box_write() function in the isomedia/box_code_base.c file of the GPAC multimedia platform allows a violator to trigger a service failure.

The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_isom_copy_sample_info() function in the isomedia/isom_write.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smooth_parse_stream_index() function in the src/media_tools/mpd.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the smoothparsestreamindex function in the src/mediatools/mpd.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_odf_vvc_cfg_write_bs() function in the odf/descriptors.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the filein_process() function in the in_file.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the TrackWriter component of the GPAC multimedia platform, which allows a intruder to trigger a service failure

The vulnerability of the TrackWriter component of the GPAC multimedia platform relates to the assignment of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the gf_node_get_tag() function in the scenegraph/base_scenegraph.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...