<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 18:21:47 +0000</lastBuildDate>
    <item>
      <title>bdu:2025-06055</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2025-06055</link>
      <description>bdu:2025-06055</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2025-06055</guid>
    </item>
    <item>
      <title>cnvd-2025-01686</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2025-01686</link>
      <description>cnvd-2025-01686</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2025-01686</guid>
    </item>
    <item>
      <title>EUVD-2026-205195</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-205195</link>
      <description>EUVD-2026-205195</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-205195</guid>
    </item>
    <item>
      <title>fkie_cve-2024-35369</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-35369</link>
      <description>&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-35369</guid>
    </item>
    <item>
      <title>GHSA-c655-qv2v-73rm</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-c655-qv2v-73rm</link>
      <description>&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-c655-qv2v-73rm</guid>
    </item>
    <item>
      <title>OESA-2025-1017 — ffmpeg security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2025-1017</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:24.03-LTS: ffmpeg&lt;/p&gt;
&lt;p&gt;FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.&#13;
&#13;
Security Fix(es):&#13;
&#13;
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.(CVE-2024-35369)&#13;
&#13;
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.(CVE-2024-36619)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:24.03-LTS: ffmpeg&lt;/p&gt;
&lt;p&gt;FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.&#13;
&#13;
Security Fix(es):&#13;
&#13;
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.(CVE-2024-35369)&#13;
&#13;
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition.(CVE-2024-36619)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2025-1017</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2024-35369</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35369</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: libav&lt;/p&gt;
&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: libav&lt;/p&gt;
&lt;p&gt;In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-35369</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-3572 — ffmpeg: Schwachstelle ermöglicht Denial of Service</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3572</link>
      <description>&lt;p&gt;Ein Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen und nicht spezifizierte Auswirkungen zu verursachen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3572</guid>
    </item>
  </channel>
</rss>
