CVE-2008-4654

CVE-2008-4654 PoC exploit for vulnerability CVE-2008-4654 VLC Media Player Stack-Based Buffer Overflow via TiVo Ty file extension. Usage Run the script having a sample .ty+ file inside the same folder as the script. The ty+ file will be modified to execute the payload when opened with VLC Media...

[SECURITY] Fedora 45 Update: ty-0.0.84-1.fc45

An extremely fast Python type checker and language server, written in Rust...

Fedora 45 : python-uv-build / ruff / rust-libcst / rust-libcst_derive / etc (2026-d1044d27b7)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-d1044d27b7 advisory. Update the libcst/libcstderive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-...

[SECURITY] Fedora 44 Update: ty-0.0.84-1.fc44

An extremely fast Python type checker and language server, written in Rust...

[SECURITY] Fedora 43 Update: ty-0.0.84-1.fc43

An extremely fast Python type checker and language server, written in Rust...

Fedora 44 : python-uv-build / ruff / rust-libcst / rust-libcst_derive / etc (2026-407b957a3b)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-407b957a3b advisory. Update the libcst/libcstderive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-...

Fedora 43 : python-uv-build / ruff / rust-libcst / rust-libcst_derive / etc (2026-056196047a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-056196047a advisory. Update the libcst/libcstderive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA-...

Fedora 46 : ruff / rust-salsa / rust-salsa-macro-rules / rust-salsa-macros / ty (2026-77f6cda09a)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77f6cda09a advisory. Update the salsa/salsa-macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55vh-cw3w. Update ruff to 0.16.9 and ty to 0.0.84,...

FFmpeg TY demultiplexer audio decoder Memory Corruption Privilege Escalation

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to corrupt memory, cause system failures, or execute arbitrary code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106183)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106183 advisory. FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with...

ANT-2026-SJ7ZVBQB · ffmpeg · Heap-buffer-overflow

heap-buffer-overflow medium Severity Claude high · Security research firm medium · Maintainer - Discovered by Claude Opus 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-SJ7ZVBQB: Heap-buffer-overflow in mpeg.h:70 While...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the demuxaudio function of the TY demuxer when processing a crafted ffconcat file with the -safe 0 flag. An attacker can achieve heap corruption and potentially execute arbitrary code or cause a denial of service ...

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

UBUNTU-CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

CVE-2026-65704

CVE-2026-65704 affects FFmpeg up to version 8.1.2, where the TY demuxer’s demux_audio() decrements packet size without bounds checking, producing a negative size that, when passed to memcpy in shorten_decode_frame(), wraps to near SIZE_MAX and causes heap corruption from reads beyond the source a...

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

CVE-2026-65704: Out-of-bounds Write

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demuxaudio function decrements packet size without bounds checking, producing a negative size...

Malicious code in @antv/g-plugin-3d (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...