https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:00:23.607673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-308264 EUVD-2026-308264 2026-10-04T00:00:23.610958+00:00 EUVD-2026-308264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5673 fkie_cve-2026-5673 2026-10-04T00:00:23.610989+00:00

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

 https://cve.radiocsirt.org/vuln/ghsa-cjcp-vc46-rm2h GHSA-cjcp-vc46-rm2h 2026-10-04T00:00:23.611020+00:00

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.

 https://cve.radiocsirt.org/vuln/oesa-2026-2210 OESA-2026-2210 — libtheora security update 2026-10-04T00:00:23.611037+00:00

Affected: openEuler:20.03-LTS-SP4: libtheora, openEuler:22.03-LTS-SP4: libtheora, openEuler:24.03-LTS: libtheora, openEuler:24.03-LTS-SP1: libtheora, openEuler:24.03-LTS-SP3: libtheora

Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats. Security Fix(es):

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.(CVE-2026-5673)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5673 UBUNTU-CVE-2026-5673 2026-10-04T00:00:23.611069+00:00

Affected: Ubuntu:16.04:LTS: asc, Ubuntu:16.04:LTS: mkvtoolnix, Ubuntu:16.04:LTS: ogmrip, Ubuntu:18.04:LTS: asc, Ubuntu:18.04:LTS: mkvtoolnix, Ubuntu:18.04:LTS: ogmrip, Ubuntu:20.04:LTS: asc, Ubuntu:20.04:LTS: mkvtoolnix, Ubuntu:20.04:LTS: ogmrip, Ubuntu:22.04:LTS: asc and 10 more

A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.