Most recent entries from all

bdu:2026-15393

EUVD-2026-341505

fkie_cve-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.

GHSA-jphx-q7f7-4x8r

OESA-2026-3541 — ffmpeg security update

Affected: openEuler:22.03-LTS-SP4: ffmpeg

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.(CVE-2026-30998)

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.(CVE-2026-58049)

openSUSE-SU-2026:11448-1 — ffmpeg-4-4.4.8-3.1 on GA media

ffmpeg-4-4.4.8-3.1 on GA media

RHSA-2026:61627 — Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects ray: Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion python: protobuf: Protobuf: Denial of Service due to recursion depth bypass sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing vllm: vLLM: Arbitrary code execution via malicious HuggingFace model vllm: vLLM: Denial of Service via malformed multimodal input or token injection thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files vllm: vLLM: Denial of Service via malformed speculative decoding workload vllm: vLLM: Denial of Service due to improper floating-point validation starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS org.apache.httpcomponents.core5/httpcore5: Apache HttpCo…

SUSE-SU-2026:23222-1 — Security update for ffmpeg-7

Security update for ffmpeg-7

UBUNTU-CVE-2026-64830

Affected: Ubuntu:Pro:14.04:LTS: libav, Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:Pro:18.04:LTS: ffmpeg, Ubuntu:Pro:20.04:LTS: ffmpeg, Ubuntu:Pro:22.04:LTS: ffmpeg, Ubuntu:Pro:24.04:LTS: ffmpeg, Ubuntu:Pro:26.04:LTS: ffmpeg

WID-SEC-W-2026-2491 — ffmpeg: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.