CVE-2026-59593

A Heap Buffer Overflow exists in the tile_info of the av1_decoder . This vulnerability could lead to a local escalation of privilege requiring execution privileges. Exploitation of this flaw requires user interaction . No specific software versions or remediation steps are provided in the documen...

PUB-A-508716405

In tileinfo of av1decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation...

DEBIAN-CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

EUVD-2026-86885

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...