<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T01:00:44.704723+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-00954</id>
    <title>bdu:2025-00954</title>
    <updated>2026-10-03T01:00:44.714564+00:00</updated>
    <content>bdu:2025-00954</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-00954"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2024-47462</id>
    <title>cnvd-2024-47462</title>
    <updated>2026-10-03T01:00:44.714598+00:00</updated>
    <content>cnvd-2024-47462</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2024-47462"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-205550</id>
    <title>EUVD-2026-205550</title>
    <updated>2026-10-03T01:00:44.714612+00:00</updated>
    <content>EUVD-2026-205550</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-205550"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-35366</id>
    <title>fkie_cve-2024-35366</title>
    <updated>2026-10-03T01:00:44.714622+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-35366"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-gq96-59xw-28wj</id>
    <title>GHSA-gq96-59xw-28wj</title>
    <updated>2026-10-03T01:00:44.714648+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-gq96-59xw-28wj"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2024-2498</id>
    <title>OESA-2024-2498 — ffmpeg security update</title>
    <updated>2026-10-03T01:00:44.714671+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: ffmpeg, openEuler:22.03-LTS-SP1: ffmpeg, openEuler:24.03-LTS: ffmpeg, openEuler:22.03-LTS-SP4: ffmpeg, openEuler:22.03-LTS-SP3: ffmpeg</p>
<p>FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.

Security Fix(es):

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.(CVE-2024-35366)

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer(CVE-2024-35367)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2024-2498"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2026:10866-1</id>
    <title>openSUSE-SU-2026:10866-1 — ffmpeg-4-4.4.7-2.1 on GA media</title>
    <updated>2026-10-03T01:00:44.714735+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>ffmpeg-4-4.4.7-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2026:10866-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35366</id>
    <title>UBUNTU-CVE-2024-35366</title>
    <updated>2026-10-03T01:00:44.714752+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libav, Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg</p>
<p>FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35366"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3572</id>
    <title>WID-SEC-W-2024-3572 — ffmpeg: Schwachstelle ermöglicht Denial of Service</title>
    <updated>2026-10-03T01:00:44.714775+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3572"/>
  </entry>
</feed>
