<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 11 Nov 2026 01:39:38 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-125198</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-125198</link>
      <description>&lt;p&gt;FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-125198</guid>
    </item>
    <item>
      <title>GHSA-4q2x-vx5w-h3m6</title>
      <link>https://db.gcve.eu/vuln/ghsa-4q2x-vx5w-h3m6</link>
      <description>&lt;p&gt;FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-4q2x-vx5w-h3m6</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-4419 — ffmpeg: Mehrere Schwachstellen</title>
      <link>https://db.gcve.eu/vuln/wid-sec-w-2026-4419</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial-of-Service-Zustand auszulösen, Daten zu manipulieren oder offenzulegen, Sicherheitsmaßnahmen zu umgehen, Speicherbeschädigungen zu verursachen und möglicherweise beliebigen Code auszuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial-of-Service-Zustand auszulösen, Daten zu manipulieren oder offenzulegen, Sicherheitsmaßnahmen zu umgehen, Speicherbeschädigungen zu verursachen und möglicherweise beliebigen Code auszuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/wid-sec-w-2026-4419</guid>
    </item>
  </channel>
</rss>
