https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:41:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11468 bdu:2025-11468 https://cve.radiocsirt.org/vuln/bdu:2025-11468 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0281 certfr-2026-avi-0281 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0281 https://cve.radiocsirt.org/vuln/cnvd-2025-04182 cnvd-2025-04182 https://cve.radiocsirt.org/vuln/cnvd-2025-04182 https://cve.radiocsirt.org/vuln/euvd-2026-218686 EUVD-2026-218686 https://cve.radiocsirt.org/vuln/euvd-2026-218686 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1594 <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1594 https://cve.radiocsirt.org/vuln/ghsa-37pp-xmcw-vg4w <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-37pp-xmcw-vg4w https://cve.radiocsirt.org/vuln/oesa-2026-3082 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: ffmpeg</p> <p>FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):</p> <p>A flaw was found in FFmpeg s TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.(CVE-2023-6602)</p> <p>Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .</p> <p>This issue affects FFmpeg: 7.1.</p> <p>Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a</p> <p>https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman(CVE-2025-0518)</p> <p>A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.(CVE-2025-10256)</p> <p>A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: ffmpeg</p> <p>FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):</p> <p>A flaw was found in FFmpeg s TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.(CVE-2023-6602)</p> <p>Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .</p> <p>This issue affects FFmpeg: 7.1.</p> <p>Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a</p> <p>https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman(CVE-2025-0518)</p> <p>A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.(CVE-2025-10256)</p> <p>A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3082 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10866-1 <p>ffmpeg-4-4.4.7-2.1 on GA media</p> <p>ffmpeg-4-4.4.7-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10866-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1594 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg, Ubuntu:25.10: ffmpeg</p> <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg, Ubuntu:25.10: ffmpeg</p> <p>A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1594 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0429 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service auszulösen oder potentiell beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ffmpeg ausnutzen, um einen Denial of Service auszulösen oder potentiell beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0429