ECHO-76FC-8CCD-D030

Bulletin has no description...

ECHO-EF46-7440-35C9

Bulletin has no description...

ECHO-6C3C-D0B8-5068

Bulletin has no description...

ECHO-19A1-5004-FD77

Bulletin has no description...

ECHO-38BA-781A-2B08

Bulletin has no description...

ECHO-8F88-0520-1270

Bulletin has no description...

ECHO-D974-573E-7A5B

Bulletin has no description...

ECHO-02E1-F73D-9326

Bulletin has no description...

ECHO-6CB2-C3D1-6736

Bulletin has no description...

ECHO-8B20-D6E3-E563

Bulletin has no description...

ECHO-D56E-2B48-3DD3

Bulletin has no description...

ECHO-9D31-8859-4C82

Bulletin has no description...

ECHO-7190-6B4D-BCCE

Bulletin has no description...

ECHO-18B0-99B8-3F51 Vulnerability is in a Vulkan HEVC decoder code path that does not exist in this version. Refs: - https://security-tracker.debian.org/tracker/CVE-2026-64831 details: | The vulnerable code (a stack-allocated VPS/SPS parameter struct built per-frame in vk_hevc_end_frame(), overflowed by an unchecked vps_num_hrd_parameters) was introduced by upstream commit 82864c21 ("vulkan_hevc: use VK_KHR_video_maintenance2 if available", 2026-03-14) as part of a refactor that is not present in the 7.1.x branch. In this source, vk_hevc_end_frame() has no such stack buffer: VPS HRD parameters are built once into a heap buffer in alloc_hevc_header_structs()/set_vps(), whose destination arrays are bounded by HEVC_MAX_LAYER_SETS (1024), and vps_num_hrd_parameters is already bounded by vps_num_layer_sets (<=1024) at parse time in libavcodec/hevc/ps.c. The CVE's own affected-version range ("FFmpeg 8.0 through 8.1.2") is consistent with this. If this spec is ever bumped to >=8.0, this entry MUST be re-evaluated and likely converted into a real patch.

Bulletin has no description...

ECHO-F134-A339-73A5

Bulletin has no description...

ECHO-9D6E-B01E-B367

Bulletin has no description...

ECHO-FCC4-5D8A-B7AF

Bulletin has no description...

ECHO-6D4B-E3EE-0962

Bulletin has no description...

ECHO-D56A-90B8-201C

Bulletin has no description...

ECHO-FAB7-82CE-9C15

Bulletin has no description...

ECHO-35B3-E206-4A0C

Bulletin has no description...

ECHO-D176-CEDE-4CE1

Bulletin has no description...

ECHO-6303-1FDB-ED48

Bulletin has no description...

ECHO-ED2D-C1B0-5E9E

Bulletin has no description...

ECHO-C184-6FD7-AE80

Bulletin has no description...

ECHO-537D-A503-AC1E

Bulletin has no description...

ECHO-B1CD-45B4-EE8A

Bulletin has no description...

ECHO-2666-6303-C7A7

Bulletin has no description...

ECHO-B416-47AD-FA4D

Bulletin has no description...

ECHO-60A1-36C5-6226

Bulletin has no description...

ECHO-CAC0-04FD-234B

Bulletin has no description...

ECHO-6F24-CDD7-9E3E

Bulletin has no description...

ECHO-860C-916C-177E

Bulletin has no description...

ECHO-A6ED-1CEA-98BC

Bulletin has no description...

ECHO-B852-F6A0-98DC

Bulletin has no description...

ECHO-120D-BA58-FA3D

Bulletin has no description...

ECHO-47EB-2C54-A673

Bulletin has no description...

ECHO-C79D-4D79-8029

Bulletin has no description...

ECHO-8B08-0176-8175

Bulletin has no description...

ECHO-6F41-EC39-7F1E

Bulletin has no description...

ECHO-E154-63C5-79FE

Bulletin has no description...

ECHO-0093-F01D-663C

Bulletin has no description...

ECHO-BE32-8712-2A19

Bulletin has no description...

ECHO-5B87-58C9-5E30

Bulletin has no description...

ECHO-DE58-3B9A-5F04

Bulletin has no description...

ECHO-C9BD-BA81-0BAE

Bulletin has no description...

ECHO-1730-F12A-DD0A

Bulletin has no description...

ECHO-E518-E2E7-E89C

Bulletin has no description...

ECHO-9A86-B1B2-E488 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ECHO-DD7E-C02D-4EA3

Bulletin has no description...