Fedora 45 : aegisub (2026-d296db490c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d296db490c advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

Fedora 44 : aegisub (2026-0c6d4471fc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c6d4471fc advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

Fedora 43 : aegisub (2026-78a11da997)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-78a11da997 advisory. Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script...

CVE-2026-92705

A flaw was found in Aegisub. The application automatically loads and runs automation scripts referenced within Advanced SubStation Alpha ASS subtitle project files without prompting the user for confirmation. By tricking a user into opening a specially crafted subtitle file referencing a maliciou...

Astra Linux – Vulnerability in gst-plugins-bad1.0

GStreamer SRT File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack...

USN-8738-1: FFmpeg vulnerabilities

It was discovered that FFmpeg incorrectly handled certain video frames when using the hqdn3d filter. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036 Adrian Junge discovered that FFmpeg incorrectly handled certain compressed video...

CVE-2026-66041

A flaw was found in FFmpeg's vfquirc filter, which handles subtitle processing. A remote attacker can exploit this heap out-of-bounds write vulnerability by providing a specially crafted PGS/SUP subtitle file. This file, with mismatched frame dimensions, can cause the software to write data beyon...

SUSE CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

CVE-2026-64830 FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

PT-2026-63434

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.1 through 8.1.2 Description A heap buffer overflow exists in the VobSub subtitle demuxer. An attacker can corrupt adjacent heap memory by providing a malicious .sub/.idx subtitle file that declares more distinct stream IDs th...

CVE-2025-29845

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...

CVE-2025-29845

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...

CVE-2025-29845

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...

EUVD-2025-201173

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...

CVE-2025-29845

CVE-2025-29845 concerns a vulnerability in VideoPlayer2 subtitle CGI that allows remote authenticated users to read .srt subtitle files. The issue is observed across multiple records (NVD, Red Hat, CNNVD, ENISA EUVD, etc.) and is associated with Synology products (VideoPlayer2 component and SRM c...

Synology Router Manager path traversal vulnerability

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A path traversal vulnerability exists in Synology Router Manager SRM, which originates from a remote authenticated user being able to read .srt files...

EUVD-2023-41232

Malicious code in bioql PyPI...

PT-2025-19324

Name of the Vulnerable Software and Affected Versions VideoPlayer2 affected versions not specified Synology Router Manager SRM affected versions not specified Description A flaw exists in VideoPlayer2 that could allow authorized remote users to read .srt subtitle files. A security issue in Synolo...

gstreamer-plugins-base: heap overwrite in subtitle parsing

A heap-based buffer overflow was found in the subparse subtitle parser of GStreamer when processing specific SRT subtitle files. This issue could allow a malicious third party to crash the application and execute code through manipulation of the heap...

ALPINE-CVE-2023-37329

GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...