29 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-125199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers c...
UBUNTU-CVE-2026-125199
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199 FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199
FFmpeg versions through 9.0.2 are susceptible to a memory leak vulnerability in the vc1_decode_frame() function within libavcodec/vc1dec.c. The root cause occurs when init_get_bits8() fails, leading to the leak of slice buffers. An attacker can exploit this by providing crafted files containing r...
CVE-2026-125199 FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
EUVD-2026-120288
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice…
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
EUVD-2017-8293
Malware in sbrugna...
EUVD-2012-2776
Malware in sbrugna...
ffmpeg:ffmpeg_AV_CODEC_ID_WMV3_fuzzer: Heap-buffer-overflow in ff_print_debug_info2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5140494328922112 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDWMV3fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
CVE-2018-19130
In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...
CVE-2018-19130
CVE-2018-19130 corresponds to an invalid memory access in Libav 12.3’s vc1_decode_frame function (libavcodec/vc1dec.c) that can cause denial-of-service via a crafted AAC file. Connected sources (e.g., Debian DLA-2021-1 and CNVD CNVD-2019-09086) identify CVE-2018-19130 as a duplicate of CVE-2017-1...
CVE-2018-19130: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...
Libav vc1_decode_frame function denial of service vulnerability
Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A denial of service vulnerability exists in the vc1decodeframe function in libavcodec/vc1dec.c in Libav...
CVE-2017-17127
The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
CVE-2017-17127
The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
CVE-2017-17127
The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
CVE-2017-17127
CVE-2017-17127 affects Libav (vc1_decode_frame in libavcodec/vc1dec.c) and allows a remote attacker to trigger a denial of service via a crafted file, caused by a NULL pointer dereference in Libav 12.2. The impact is an application crash (availability impact). Connected advisories indicate the is...