https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:34:15.234413+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2024-tp71502 CLEANSTART-2024-TP71502 — In FFmpeg 4 2026-10-04T01:34:15.356113+00:00

Affected: CleanStart: ffmpeg4

Security vulnerability affects the ffmpeg4 package. In FFmpeg 4.

 https://cve.radiocsirt.org/vuln/cnvd-2019-02933 cnvd-2019-02933 2026-10-04T01:34:15.356174+00:00 cnvd-2019-02933 https://cve.radiocsirt.org/vuln/euvd-2026-66370 EUVD-2026-66370 2026-10-04T01:34:15.356192+00:00 EUVD-2026-66370 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13305 fkie_cve-2018-13305 2026-10-04T01:34:15.356204+00:00

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-hj8w-74cf-p23x GHSA-hj8w-74cf-p23x 2026-10-04T01:34:15.356227+00:00

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2018-13305 gsd-2018-13305 2026-10-04T01:34:15.356242+00:00 gsd-2018-13305 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0024-1 openSUSE-SU-2020:0024-1 — Security update for ffmpeg-4 2026-10-04T01:34:15.356253+00:00

Security update for ffmpeg-4

 https://cve.radiocsirt.org/vuln/suse-su-2018:3609-1 SUSE-SU-2018:3609-1 — Security update for ffmpeg 2026-10-04T01:34:15.356271+00:00

Security update for ffmpeg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-13305 UBUNTU-CVE-2018-13305 2026-10-04T01:34:15.356287+00:00

Affected: Ubuntu:16.04:LTS: oxide-qt, Ubuntu:16.04:LTS: gst-libav1.0, Ubuntu:16.04:LTS: mythtv, Ubuntu:18.04:LTS: gst-libav1.0, Ubuntu:18.04:LTS: mythtv, Ubuntu:20.04:LTS: gst-libav1.0, Ubuntu:20.04:LTS: mythtv, Ubuntu:22.04:LTS: chromium-browser, Ubuntu:22.04:LTS: gst-libav1.0, Ubuntu:22.04:LTS: mythtv and 9 more

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.