Hello Video Codec 安全漏洞

Hello Video Codec is a video codec from Tempus Ex open source. A security vulnerability exists in Hello Video Codec version v0.1.0, which stems from improper validation of inputs to the BitstreamWriter::writebits function, which could lead to a denial of service attack...

PT-2025-48451

Name of the Vulnerable Software and Affected Versions Tempus Ex hello-video-codec version 0.1.0 Description A flaw exists in the BitstreamWriter::write bits function that allows for a Denial of Service DoS through crafted input due to improper input validation. Recommendations Update to a newer...

CVE-2025-63095

CVE-2025-63095 affects Tempus Ex hello-video-codec v0.1.0. The vulnerability is due to improper input validation in BitstreamWriter::write_bits(), enabling a Denial of Service via crafted input. Public advisories (e.g., PT-2025-48451) recommend updating to a newer, fixed version. Connected source...

TencentOS Server 4: gstreamer1-plugins-bad-free (TSSA-2025:0408)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0408 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

Linux Distros Unpatched Vulnerability : CVE-2025-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom- iris aa00000.video-codec: Direct firmware load for...

CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

DEBIAN-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

UBUNTU-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

CVE-2025-40208 media: iris: fix module removal if firmware download failed

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

CVE-2025-40208 media: iris: fix module removal if firmware download failed

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

The vulnerability of the vdec_h264SliceDecode() function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_h264_req_if.c file of the Linux kernel-based multimedia device support driver allows a remote attacker to trigger a service denial.

The vulnerability of the vdech264sliceDecode function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdech264reqif.c file of the Linux kernel-based multimedia device support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service...

media: mediatek: vcodec: Handle invalid decoder vsi

...

EUVD-2016-3536

Malware in sbrugna...

EUVD-2016-4825

Malware in sbrugna...

EUVD-2017-0886

Malware in sbrugna...

RLSA-2025:8183 Important: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution...

EUVD-2022-30987

Malicious code in bioql PyPI...

CVE-2022-50383 media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Can't set dst buffer to done when lat decode error Core thread will call v4l2m2mbufdone to set dst buffer done for lat architecture. If lat call v4l2m2mbufdoneandjobfinish to free dst buffer when lat deco...

Linux Distros Unpatched Vulnerability : CVE-2016-2454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Qualcomm hardware video codec in Android before 2016-05-01 on Nexus 5 devices allows remote attackers to cause a denial of service reboot via a crafted file...