20669 matches found
CVE-2026-64832
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...
CVE-2026-64831
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...
CVE-2026-64832 FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ffnvdecstartframesepref error path frees...
CVE-2026-64831
CVE-2026-64831 affects FFmpeg 8.0–8.1.2 and concerns the Vulkan HEVC (H.265) hardware decoder. The vulnerability is a stack buffer overflow triggered by a crafted HEVC/H.265 bitstream that can overflow stack-allocated arrays in the vk_hevc_end_frame function by embedding a malicious vps_num_hrd_p...
CVE-2026-61390
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets...
CVE-2026-45382
A flaw was found in libde265, an open-source implementation of the H.265 video codec. A remote attacker could exploit this by providing a malformed H.265 video stream. Processing this malformed data can lead to a heap-buffer-overflow read, which may cause a denial of service DoS by crashing the...
SUSE CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...
SUSE CVE-2026-16359
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...
SUSE CVE-2026-16362
Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13...
SUSE CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153...
UBUNTU-CVE-2026-16359
Incorrect boundary conditions in the Audio/Video: GMP component. This...
UBUNTU-CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component...
UBUNTU-CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb component. Thi...
UBUNTU-CVE-2026-16362
Use-after-free in the WebRTC: Audio/Video component. This vulnerabilit...
CVE-2026-63856
A flaw was found in the Linux kernel's AMDGPU Video Core Next VCN 2.0 component. This vulnerability arises because the VCN encoder and decoder rings do not properly support 64-bit user fence writes. An attacker could exploit this by submitting command sequences with 64-bit user fences, leading to...
libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC Scalable Video Coding layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer contex...
libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...
libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel value...