11209 matches found
ECHO-D088-1F41-49DB
Bulletin has no description...
ECHO-3341-E81D-BF5B
Bulletin has no description...
ECHO-18B0-99B8-3F51 Vulnerability is in a Vulkan HEVC decoder code path that does not exist in this version. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-64831 details: | The vulnerable code (a stack-allocated VPS/SPS parameter struct built per-frame in vk_hevc_end_frame(), overflowed by an unchecked vps_num_hrd_parameters) was introduced by upstream commit 82864c21 ("vulkan_hevc: use VK_KHR_video_maintenance2 if available", 2026-03-14) as part of a refactor that is not present in the 7.1.x branch. In this source, vk_hevc_end_frame() has no such stack buffer: VPS HRD parameters are built once into a heap buffer in alloc_hevc_header_structs()/set_vps(), whose destination arrays are bounded by HEVC_MAX_LAYER_SETS (1024), and vps_num_hrd_parameters is already bounded by vps_num_layer_sets (<=1024) at parse time in libavcodec/hevc/ps.c. The CVE's own affected-version range ("FFmpeg 8.0 through 8.1.2") is consistent with this. If this spec is ever bumped to >=8.0, this entry MUST be re-evaluated and likely converted into a real patch.
Bulletin has no description...
ECHO-2666-6303-C7A7
Bulletin has no description...
ECHO-E01E-70FF-C35F
Bulletin has no description...
ECHO-29F5-C1F8-003E
Bulletin has no description...
ECHO-F90F-4A99-3511
Bulletin has no description...
ECHO-FAC5-2977-3A4E
Bulletin has no description...
ECHO-12B0-ABDB-5905
Bulletin has no description...
ECHO-E02F-37FD-99CC
Bulletin has no description...
ECHO-27BC-54E1-5AD4
Bulletin has no description...
ECHO-82D3-866E-E0F0
Bulletin has no description...
ECHO-765C-0C1B-39B8
Bulletin has no description...
ECHO-B79A-0540-F5C0
Bulletin has no description...
ECHO-7942-7F96-AC0B
Bulletin has no description...
ECHO-D5B1-8A54-BB7B
Bulletin has no description...
ECHO-E33C-86F9-2EB1
Bulletin has no description...
ECHO-B855-75F1-B767
Bulletin has no description...
ECHO-5EB9-1353-C268
Bulletin has no description...
ECHO-31B6-45F7-C636
Bulletin has no description...
ECHO-1CE1-DC45-4ED3
Bulletin has no description...
ECHO-6D1E-5C87-D38E
Bulletin has no description...
ECHO-47E5-CEAA-7523
Bulletin has no description...
ECHO-C792-0EEB-23BC
Bulletin has no description...
ECHO-3DE4-0D29-7632
Bulletin has no description...
ECHO-977E-6837-5FD2
Bulletin has no description...
ECHO-54D2-F1B2-3225
Bulletin has no description...
ECHO-DCB3-F5F0-1F95
Bulletin has no description...
ECHO-E174-EE41-E2AE
Bulletin has no description...
ECHO-4AC7-1B21-4254 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3C38-BC73-3E4D
Bulletin has no description...
ECHO-B241-5686-39E3
Bulletin has no description...
ECHO-496E-C070-4EC0
Bulletin has no description...
ECHO-17BE-B4F2-A736
Bulletin has no description...
ECHO-91F4-1ED9-6EBA
Bulletin has no description...
ECHO-E828-17C4-5E7F
Bulletin has no description...
ECHO-E2BA-57E8-5830
Bulletin has no description...
ECHO-47F1-73FB-7E9F
Bulletin has no description...
ECHO-F301-3BAE-8FC2
Bulletin has no description...
ECHO-1888-E250-4427
Bulletin has no description...
ECHO-A34B-F9B7-E0E0 CVE has been rejected/retracted by upstream sources: upstream
Bulletin has no description...
ECHO-CC15-2DB8-B0F4 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4575-9D3E-E7D2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-52DD-1135-F406
Bulletin has no description...
ECHO-AE86-415B-BA40
Bulletin has no description...
ECHO-D8DE-1556-967B
Bulletin has no description...
ECHO-46C2-195A-D499
Bulletin has no description...
ECHO-9CE2-5D11-2D0A
Bulletin has no description...