CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072

A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21069

A type-conversion bug in the VC1 codec of libsavsvc.so allows local attackers to write out-of-bounds memory. Exploitation requires local access with low privileges. No in-the-wild exploitation is reported. Fix: update to Samsung SMR Aug-2026 Release 1.

EUVD-2026-55094

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-69400

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the VC1 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds write occurs when a...

CVE-2026-21069: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21072: Improper Input Validation

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

PT-2026-69397

Name of the Vulnerable Software and Affected Versions libsavsvc.so versions prior to SMR Aug-2026 Release 1 Description An incorrect conversion between numeric types in the VC1 codec within the libsavsvc.so library allows local attackers to perform an out-of-bounds memory write. An out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2017-17127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application...

Linux Distros Unpatched Vulnerability : CVE-2018-18829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists a NULL pointer dereference in ffvc1parseframeheaderadv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafte...

Linux Distros Unpatched Vulnerability : CVE-2018-18828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists a heap-based buffer overflow in vc1decodeiblockadv in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted a...

Linux Distros Unpatched Vulnerability : CVE-2018-13305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1putblocksclamped function in libavcodec/vc1block.c may trigger an...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Segv on unknown address in ff_refstruct_unref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4504434689769472 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Use-of-uninitialized-value in vc1_put_blocks_clamped

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6188476880453632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Use-of-uninitialized-value in vc1_loop_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6366103557701632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Use-of-uninitialized-value in guess_mv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5173365772451840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...