Поиск уязвимостей
Количество 12
Количество 12
GHSA-qh4m-69pj-9vc2
A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash).
CVE-2026-12706
A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash).
CVE-2026-12706
A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash).
CVE-2026-12706
A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash).
CVE-2026-12706
A use-after-free vulnerability was found in FFmpeg's RASC video decode ...
ROS-20260824-80-0032
Уязвимость ffmpeg
ROS-20260824-73-0032
Уязвимость ffmpeg
BDU:2026-15255
Уязвимость функции decode_move() файла libavcodec/rasc.c мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2026:3542-1
Security update for ffmpeg-4
SUSE-SU-2026:3529-1
Security update for ffmpeg-4
openSUSE-SU-2026:21877-1
Security update for ffmpeg-7
ALT-PU-2026-20100
ALT-PU-2026-20100: package `ffmpeg` update to version 4.4.8-alt2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-qh4m-69pj-9vc2 A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash). | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12706 A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash). | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-12706 A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash). | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-12706 A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash). | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-12706 A use-after-free vulnerability was found in FFmpeg's RASC video decode ... | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
 | ROS-20260824-80-0032 Уязвимость ffmpeg | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| ROS-20260824-73-0032 Уязвимость ffmpeg | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | BDU:2026-15255 Уязвимость функции decode_move() файла libavcodec/rasc.c мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
 | SUSE-SU-2026:3542-1 Security update for ffmpeg-4 | 3 месяца назад | ||
| SUSE-SU-2026:3529-1 Security update for ffmpeg-4 | 3 месяца назад | ||
| openSUSE-SU-2026:21877-1 Security update for ffmpeg-7 | около 2 месяцев назад | ||
| ALT-PU-2026-20100 ALT-PU-2026-20100: package `ffmpeg` update to version 4.4.8-alt2 | CVSS3: 9.8 | 10 дней назад |
Уязвимостей на страницу