CVE-2026-67290

FreeRDP before 3.29.0 is affected by a heap out-of-bounds read in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. The vulnerability allows a remote attacker to crash a server by sending malformed media format data, exploiting fixed offsets without...

The vulnerabilities of the software platforms Flash Player and Adobe Integrated Runtime allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of the Flash Player and Adobe Integrated Runtime are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service interruptions such as out-of-memory reading or memory corruption using specially crafted MPEG-4...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is due to a loss of integer precision. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted MPEG-4 format data...