CVE-2025-47331 Buffer Over-read in Video

Information disclosure while processing a firmware event...

CVE-2025-47331

Technical details are not publicly available in the provided documents for CVE-2025-47331; monitor for updates.

FFmpeg: undisclosed vulnerability (ZAI-2026-VM32VU)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-2NM8PB)

Not disclosed. Details are not yet publicly disclosed...

CVE-2023-53981

PhotoShow 3.0 contains a remote code execution vulnerability that allows authenticated administrators to inject malicious commands through the exiftran path configuration. Attackers can exploit the ffmpeg configuration settings by base64 encoding a reverse shell command and executing it through a...

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 8.0, which stems from an integer overflow in the yuv2ya16Xctemplate function, which could lead to memory corruption...

JLSEC-2025-150 A vulnerability was found in FFmpeg up to 7.1

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

JLSEC-2025-133 A vulnerability was found in FFmpeg up to 7.0.1

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnmdecodeframe in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

EUVD-2019-5051

Malware in sbrugna...

EUVD-2020-6549

Malware in sbrugna...

EUVD-2016-3912

Malware in sbrugna...

EUVD-2021-9030

Malicious code in bioql PyPI...

EUVD-2023-47933

Malicious code in bioql PyPI...

EUVD-2023-47924

Malicious code in bioql PyPI...

CLSA-2025-1759431860 kernel: Fix of 40 CVEs

ASoC: topology: Clean up route loading CVE-2024-41069 - ASoC: topology: Fix references to freed memory CVE-2024-41069 - drm/dpmst: Fix MST sideband message body length check CVE-2024-56616 - Bluetooth: L2CAP: Fix not validating setsockopt user input CVE-2024-35965 - Bluetooth: L2CAP:...

CVE-2023-53497 media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called()

In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2isstreaming with vb2startstreamingcalled The vsp1 driver uses the vb2isstreaming function in its .bufqueue handler to check if the .startstreaming operation has been called, and decide whether to just add...

SUSE CVE-2023-53425

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still dereferenced. This fixes this smatch warning: drivers/media/platform/mediatek/vpu/mtkvpu.c:570 vpuloadfirmware warn: address of NULL point...

CVE-2023-53425

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still dereferenced. This fixes this smatch warning: drivers/media/platform/mediatek/vpu/mtkvpu.c:570 vpuloadfirmware warn: address of NULL point...