https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:06:34.049199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08610 bdu:2026-08610 2026-10-02T12:06:34.280158+00:00 bdu:2026-08610 https://cve.radiocsirt.org/vuln/euvd-2026-339783 EUVD-2026-339783 2026-10-02T12:06:34.280208+00:00 EUVD-2026-339783 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8461 fkie_cve-2026-8461 2026-10-02T12:06:34.280223+00:00

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

This vulnerability is associated with the file libavcodec/magicyuv.C.

This issue affects FFmpeg before version 8.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-qff7-4q6c-m8h6 GHSA-qff7-4q6c-m8h6 2026-10-02T12:06:34.280257+00:00

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

This vulnerability is associated with the file libavcodec/magicyuv.C.

This issue affects FFmpeg before version 8.1.2.

 https://cve.radiocsirt.org/vuln/oesa-2026-2696 OESA-2026-2696 — ffmpeg security update 2026-10-02T12:06:34.280276+00:00

Affected: openEuler:24.03-LTS-SP1: ffmpeg

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):

A flaw was found in FFmpeg s TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.(CVE-2023-6602)

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

This vulnerability is associated with the file libavcodec/magicyuv.C.

This issue affects FFmpeg before version 8.1.2.(CVE-2026-8461)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11347-1 openSUSE-SU-2026:11347-1 — ffmpeg-8-8.1.2-2.1 on GA media 2026-10-02T12:06:34.280304+00:00

ffmpeg-8-8.1.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:43711 RHSA-2026:43711 — Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - ffmpeg 2026-10-02T12:06:34.280322+00:00

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8461 UBUNTU-CVE-2026-8461 2026-10-02T12:06:34.280340+00:00

Affected: Ubuntu:Pro:14.04:LTS: libav, Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg, Ubuntu:25.10: ffmpeg, Ubuntu:Pro:26.04:LTS: ffmpeg

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2011 WID-SEC-W-2026-2011 — ffmpeg: Schwachstelle ermöglicht Codeausführung und Denial of Service 2026-10-02T12:06:34.280372+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.