SUSE CVE-2026-56209

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel value...

RHEL 9 : libvpx (RHSA-2025:14140)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14140 advisory. The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia...

Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double-free in libvpx encoder CVE-2025-5283 For more details about the security issues, including the impac...

SUSE CVE-2018-6912

The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

Aom 代码问题漏洞

Aom is a next-generation open-source digital media technology for everyone organized by the Alliance For Open Media AOM. A security vulnerability exists in AOM version 2.0.1, which stems from the presence of a dereferenced NULL pointer in component av1/av1dxiface.c. The vulnerability is caused by...

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...