Lucene search
K

10 matches found

SUSE CVE
SUSE CVE
added 2026/04/06 11:25 p.m.3 views

SUSE CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

5.6CVSS5.8AI score0.00005EPSS
Exploits1References3
NVD
NVD
added 2026/04/06 10:16 a.m.1 views

CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

7.1CVSS0.00005EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/04/06 10:16 a.m.0 views

CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

7.1CVSS5.9AI score0.00005EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/06 9:22 a.m.1 views

CVE-2026-5673

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

5.6CVSS5.9AI score0.00005EPSS
Exploits1References4
CVE
CVE
added 2026/04/06 9:22 a.m.10 views

CVE-2026-5673

CVE-2026-5673 affects libtheora’s AVI parser. The flaw is a heap-based out-of-bounds read in the avi_parse_input_file() function triggered by a crafted AVI file with a truncated header sub-chunk. Local attackers can exploit this by tricking a user into opening such a file, leading to a potential ...

7.1CVSS5.9AI score0.00005EPSS
Exploits1References3Affected Software2
Cvelist
Cvelist
added 2026/04/06 9:22 a.m.31 views

CVE-2026-5673 Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifically in the aviparseinputfile function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a...

5.6CVSS0.00005EPSS
Exploits1References3
Snyk
Snyk
added 2026/04/06 9:16 a.m.0 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the aviparseinputfile process. An attacker can cause application crashes or leak sensitive information from memory by convincing a user to open a specially crafted AVI file containing a truncated header sub-chunk...

7.1CVSS5.8AI score0.00005EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30592

Name of the Vulnerable Software and Affected Versions libtheora affected versions not specified Description A heap-based out-of-bounds read flaw exists in libtheora's AVI Audio Video Interleave parser, specifically within the avi parse input file function. A local attacker could exploit this by...

7.1CVSS5.8AI score0.00005EPSS
Exploits1References13
SUSE CVE
SUSE CVE
added 2026/03/25 4:56 p.m.6 views

SUSE CVE-2026-23318

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validators table for UAC3 AC header descriptor is defined with the wrong protocol version UACVERSION2, while it should have been UACVERSION3. This...

5.5CVSS5.7AI score0.00022EPSS
Exploits0References17
EUVD
EUVD
added 2026/03/25 12:30 p.m.2 views

EUVD-2026-15267

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validators table for UAC3 AC header descriptor is defined with the wrong protocol version UACVERSION2, while it should have been UACVERSION3. This...

5.6AI score0.00022EPSS
Exploits0References7
Rows per page
Query Builder