Количество 10
Количество 10
BDU:2026-08913
Уязвимость функции decode_dlta() файла libavcodec/rasc.c видеодекодера RASC мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260820-80-0009
Уязвимость ffmpeg
ROS-20260820-73-0007
Уязвимость ffmpeg
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) perform ...
GHSA-mjxr-6gqf-w78h
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
SUSE-SU-2026:4150-1
Security update for ffmpeg-4
SUSE-SU-2026:4149-1
Security update for ffmpeg-4
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-08913 Уязвимость функции decode_dlta() файла libavcodec/rasc.c видеодекодера RASC мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
 | ROS-20260820-80-0009 Уязвимость ffmpeg | CVSS3: 8.6 | 0% Низкий | около 1 месяца назад |
| ROS-20260820-73-0007 Уязвимость ffmpeg | CVSS3: 8.6 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 7.6 | 0% Низкий | 3 месяца назад |
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
| CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) perform ... | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
| GHSA-mjxr-6gqf-w78h FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:4150-1 Security update for ffmpeg-4 | 5 дней назад | ||
| SUSE-SU-2026:4149-1 Security update for ffmpeg-4 | 5 дней назад |
Уязвимостей на страницу