https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:28:57.169844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03328 bdu:2019-03328 2026-10-03T14:28:57.304216+00:00 bdu:2019-03328 https://cve.radiocsirt.org/vuln/cleanstart-2024-jg05415 CLEANSTART-2024-JG05415 — libavcodec/hevcdec 2026-10-03T14:28:57.304279+00:00

Affected: CleanStart: ffmpeg4

Security vulnerability affects the ffmpeg4 package. libavcodec/hevcdec.

 https://cve.radiocsirt.org/vuln/euvd-2026-54333 EUVD-2026-54333 2026-10-03T14:28:57.304334+00:00 EUVD-2026-54333 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11338 fkie_cve-2019-11338 2026-10-03T14:28:57.304359+00:00

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.

 https://cve.radiocsirt.org/vuln/ghsa-96rf-5r43-949p GHSA-96rf-5r43-949p 2026-10-03T14:28:57.304396+00:00

libavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.

 https://cve.radiocsirt.org/vuln/gsd-2019-11338 gsd-2019-11338 2026-10-03T14:28:57.304423+00:00 gsd-2019-11338 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0024-1 openSUSE-SU-2020:0024-1 — Security update for ffmpeg-4 2026-10-03T14:28:57.304442+00:00

Security update for ffmpeg-4

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-11338 UBUNTU-CVE-2019-11338 2026-10-03T14:28:57.304472+00:00

Affected: Ubuntu:16.04:LTS: ffmpeg, Ubuntu:18.04:LTS: ffmpeg

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.