Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 01:59:03 +0000 CVE-2026-125217 — FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure https://db.gcve.eu/vuln/cve-2026-125217 <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized heap data from frame_buffer to leak into output packets.</p> <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized heap data from frame_buffer to leak into output packets.</p> https://db.gcve.eu/vuln/cve-2026-125217