Поиск уязвимостей
Количество 13
Количество 13
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) perform ...
GHSA-mjxr-6gqf-w78h
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.
BDU:2026-08913
Уязвимость функции decode_dlta() файла libavcodec/rasc.c видеодекодера RASC мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260820-80-0009
Уязвимость ffmpeg
ROS-20260820-73-0007
Уязвимость ffmpeg
SUSE-SU-2026:4150-1
Security update for ffmpeg-4
SUSE-SU-2026:4149-1
Security update for ffmpeg-4
openSUSE-SU-2026:21877-1
Security update for ffmpeg-7
ALT-PU-2026-20100
ALT-PU-2026-20100: package `ffmpeg` update to version 4.4.8-alt2
ALT-PU-2026-15796
ALT-PU-2026-15796: package `ffmpeg` update to version 7.1.5-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 7.6 | 0% Низкий | 4 месяца назад |
 | CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
| CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) perform ... | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
| GHSA-mjxr-6gqf-w78h FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption. | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
 | BDU:2026-08913 Уязвимость функции decode_dlta() файла libavcodec/rasc.c видеодекодера RASC мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.6 | 0% Низкий | 4 месяца назад |
 | ROS-20260820-80-0009 Уязвимость ffmpeg | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
| ROS-20260820-73-0007 Уязвимость ffmpeg | CVSS3: 8.6 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:4150-1 Security update for ffmpeg-4 | около 2 месяцев назад | ||
| SUSE-SU-2026:4149-1 Security update for ffmpeg-4 | около 2 месяцев назад | ||
| openSUSE-SU-2026:21877-1 Security update for ffmpeg-7 | около 2 месяцев назад | ||
| ALT-PU-2026-20100 ALT-PU-2026-20100: package `ffmpeg` update to version 4.4.8-alt2 | CVSS3: 9.8 | 10 дней назад | |
| ALT-PU-2026-15796 ALT-PU-2026-15796: package `ffmpeg` update to version 7.1.5-alt3 | CVSS3: 9.8 | около 1 месяца назад |
Уязвимостей на страницу