22797 matches found
PT-2026-83048
A flaw was found in FFmpeg. The tdsc load cursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...
CVE-2026-38343: Integer Overflow or Wraparound
An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
CVE-2026-78073: Improper Neutralization of Input During Web Page Generation
Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked escaping, leading to reflected XSS vectors...
PT-2026-83079
Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked escaping, leading to reflected XSS vectors...
The vulnerability of the Mesa video driver library, related to writing beyond the buffer boundaries, allows a hacker to cause a service failure.
The vulnerability of the Mesa video driver library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows attackers to gain access to confidential data.
The vulnerability of the Audio/Video components in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential dat...
CVE-2026-38344: NULL Pointer Dereference
A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
CVE-2026-80570
A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...
CVE-2026-80568
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...
WordPress All-in-One Video Gallery plugin < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability
Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin All-in-One Video Gallery versions 4.9.2...
SUSE CVE-2026-72484
In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...
SUSE CVE-2026-78969
Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-82495
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id video and id ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of...
CVE-2026-38344
A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
PT-2026-82757
An integer overflow in the libavfilter/vf scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
CVE-2026-38343
An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the libavfilter/vfscale.c file. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted video file. Remediation Upgrade ffmpeg to version 8.1 or higher...
CVE-2026-38344
A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...
