| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-125218 | 7.0 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing A | 2026-11-13 13:18:14 | 2026-11-09 19:16:59 |
| CVE-2026-125210 | 7.0 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in libavcodec/libaribcaption.c when decoding with sub_type text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, cau | 2026-11-13 13:18:13 | 2026-11-09 19:16:57 |
| CVE-2026-125206 | 2.5 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that reads before the blocks buffer for interlaced frames with odd heights. Attackers can supply video with alpha and odd height encoded to | 2026-11-13 13:18:12 | 2026-11-09 19:16:57 |
| CVE-2026-125202 | 7.0 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in libavcodec/vaapi_hevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture | 2026-11-13 13:18:11 | 2026-11-09 19:16:56 |
| CVE-2026-125198 | 2.5 | FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, le | 2026-11-13 13:18:10 | 2026-11-09 19:16:55 |
| CVE-2026-125190 | 3.3 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode_mvc2() in libavcodec/mvcdec.c that leaks uninitialized stack memory through unchecked palette indices. Attackers can supply a crafted MVC2 stream declaring few colors but | 2026-11-13 13:18:09 | 2026-11-09 19:16:54 |
| CVE-2026-125182 | 3.3 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder joint_decode() function because cook_decode_init() does not check js_subband_start against subbands. Attackers can supply a crafted RealMedia file whose extradata c | 2026-11-13 13:18:08 | 2026-11-09 19:16:53 |
| CVE-2026-125178 | 6.1 | FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdsc_load_cursor() in libavcodec/tdsc.c, which stores cursor dimensions before validating them. Attackers can supply a crafted AVI file with oversized TDSC cursor dimensions so | 2026-11-13 13:18:07 | 2026-11-09 19:16:52 |
| CVE-2026-125170 | 3.3 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa_decode_rle() in libavcodec/targa.c caused by missing packet length checks. Attackers can supply truncated RLE-compressed TGA images so decoded frames contain left | 2026-11-13 13:18:06 | 2026-11-09 19:16:51 |
| CVE-2026-125101 | 3.3 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in the VMnc decoder in libavcodec/vmnc.c that restores an unwritten cursor save area into later frames. Attackers can supply a crafted VMnc stream where a frame fails after loading | 2026-11-13 13:18:05 | 2026-11-09 19:16:51 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: