https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:00:06.067631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09058 bdu:2024-09058 2026-10-08T18:00:06.078250+00:00 bdu:2024-09058 https://cve.radiocsirt.org/vuln/cleanstart-2024-lz69519 CLEANSTART-2024-LZ69519 — FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva fo… 2026-10-08T18:00:06.078295+00:00

Affected: CleanStart: ffmpeg4

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM.

 https://cve.radiocsirt.org/vuln/cnvd-2019-02947 cnvd-2019-02947 2026-10-08T18:00:06.078335+00:00 cnvd-2019-02947 https://cve.radiocsirt.org/vuln/euvd-2026-71300 EUVD-2026-71300 2026-10-08T18:00:06.078349+00:00 EUVD-2026-71300 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1999012 fkie_cve-2018-1999012 2026-10-08T18:00:06.078359+00:00

FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later.

 https://cve.radiocsirt.org/vuln/ghsa-pvhq-7xgc-xmjm GHSA-pvhq-7xgc-xmjm 2026-10-08T18:00:06.078382+00:00

FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later.

 https://cve.radiocsirt.org/vuln/gsd-2018-1999012 gsd-2018-1999012 2026-10-08T18:00:06.078398+00:00 gsd-2018-1999012 https://cve.radiocsirt.org/vuln/suse-su-2018:2305-1 SUSE-SU-2018:2305-1 — Security update for ffmpeg 2026-10-08T18:00:06.078408+00:00

Security update for ffmpeg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1999012 UBUNTU-CVE-2018-1999012 2026-10-08T18:00:06.078425+00:00

Affected: Ubuntu:Pro:14.04:LTS: libav, Ubuntu:16.04:LTS: ffmpeg, Ubuntu:16.04:LTS: oxide-qt, Ubuntu:16.04:LTS: gst-libav1.0, Ubuntu:16.04:LTS: kino, Ubuntu:18.04:LTS: gst-libav1.0, Ubuntu:18.04:LTS: kino, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:20.04:LTS: gst-libav1.0, Ubuntu:20.04:LTS: kino and 14 more

FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. This attack appear to be exploitable via specially crafted PVA file has to be provided as input. This vulnerability appears to have been fixed in 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 and later.