Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the VP8 stateless decoder’s “smatch” warning. A “smatch” static checker warning was also fixed in vdecvp8reqif.c. This issue causes the kernel to crash when fb is set to NULL...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130377 advisory. ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy...

CVE-2026-100220

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

EUVD-2026-100333

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-100220

A heap-based buffer overflow exists in the Windows Media Video Decoder , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the documents confirm the impact and root cause, specific exploit details or in-t...

Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-100220: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

PT-2026-111895

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 11 26H2 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in the Windows Media Video Decoder. This flaw allows an unauthorized remote attacker to execute arbitrary code a...

Microsoft Windows: CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

PT-2026-116206

Уязвимость декодера Media Video Decoder операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: MediTech; vcodec: Fixed the H264 multi-stateless decoder’s match warning. A match static checker warning has been fixed in vdech264reqmultiif.c. This issue causes the kernel to crash when fb is NULL...

CVE-2026-97581

A flaw was found in the Linux kernel's Hantro video decoder driver. When processing High Efficiency Video Coding HEVC video streams, the driver fails to validate the number of tile rows and columns against the allocated buffer capacity. A local attacker could exploit this vulnerability by...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

FFmpeg TDSC Video Decoder Memory Corruption

The vulnerability of the TDSC video decoder in the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to damage memory, cause system failures, or execute arbitrary code...

FFmpeg LCL/ZLIB Decoder Disclosure

The vulnerability of the LCL/ZLIB video decoder in the FFmpeg multimedia library is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Astra Linux – Vulnerability in dav1d

An integer overflow occurs in the dav1d AV1 decoder, which can happen when decoding videos with a large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to a version later than 1.4.0 of dav1d...

SUSE-SU-2026:4150-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. - CVE-2026-64834: Infinite...

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. CVE-2026-64834: Infinite Loop Do...

SUSE-SU-2026:4149-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. - CVE-2026-64834: Infinite...