https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:59:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-308264 EUVD-2026-308264 https://cve.radiocsirt.org/vuln/euvd-2026-308264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5673 <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5673 https://cve.radiocsirt.org/vuln/ghsa-cjcp-vc46-rm2h <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> https://cve.radiocsirt.org/vuln/ghsa-cjcp-vc46-rm2h https://cve.radiocsirt.org/vuln/oesa-2026-2210 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libtheora, openEuler:22.03-LTS-SP4: libtheora, openEuler:24.03-LTS: libtheora, openEuler:24.03-LTS-SP1: libtheora, openEuler:24.03-LTS-SP3: libtheora</p> <p>Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats. Security Fix(es):</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.(CVE-2026-5673)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libtheora, openEuler:22.03-LTS-SP4: libtheora, openEuler:24.03-LTS: libtheora, openEuler:24.03-LTS-SP1: libtheora, openEuler:24.03-LTS-SP3: libtheora</p> <p>Theora is a free and open video compression format from the Xiph.org Foundation. Like all our multimedia technology it can be used to distribute film and video online and on disc without the licensing and royalty fees or vendor lock-in associated with other formats. Security Fix(es):</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.(CVE-2026-5673)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2210 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5673 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: asc, Ubuntu:16.04:LTS: mkvtoolnix, Ubuntu:16.04:LTS: ogmrip, Ubuntu:18.04:LTS: asc, Ubuntu:18.04:LTS: mkvtoolnix, Ubuntu:18.04:LTS: ogmrip, Ubuntu:20.04:LTS: asc, Ubuntu:20.04:LTS: mkvtoolnix, Ubuntu:20.04:LTS: ogmrip, Ubuntu:22.04:LTS: asc and 10 more</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: asc, Ubuntu:16.04:LTS: mkvtoolnix, Ubuntu:16.04:LTS: ogmrip, Ubuntu:18.04:LTS: asc, Ubuntu:18.04:LTS: mkvtoolnix, Ubuntu:18.04:LTS: ogmrip, Ubuntu:20.04:LTS: asc, Ubuntu:20.04:LTS: mkvtoolnix, Ubuntu:20.04:LTS: ogmrip, Ubuntu:22.04:LTS: asc and 10 more</p> <p>A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5673