klipy-app:dev (debian 13.7) - Trivy Report - 2026-11-08 04:00:26.584878139 +0100 CET m=+0.040626688

debian
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
apt	CVE-2026-109518	HIGH	3.0.3	3.0.4	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
bsdutils	CVE-2026-76642	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
bsdutils	CVE-2026-78408	HIGH	1:2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
bsdutils	CVE-2026-78409	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
bsdutils	CVE-2026-78410	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
ffmpeg	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
ffmpeg	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
ffmpeg	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
ffmpeg	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
ffmpeg	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
ffmpeg	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
ffmpeg	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
ffmpeg	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
ffmpeg	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
ffmpeg	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
ffmpeg	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
ffmpeg	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
ffmpeg	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
ffmpeg	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
ffmpeg	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
ffmpeg	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
ffmpeg	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libacl1	CVE-2026-54369	HIGH	2.3.2-2+b1		https://access.redhat.com/errata/RHSA-2026:34351 https://access.redhat.com/errata/RHSA-2026:42736 https://access.redhat.com/errata/RHSA-2026:42739 https://access.redhat.com/errata/RHSA-2026:43420 https://access.redhat.com/errata/RHSA-2026:44481 https://access.redhat.com/errata/RHSA-2026:46836 https://access.redhat.com/errata/RHSA-2026:50205 https://access.redhat.com/errata/RHSA-2026:53371 https://access.redhat.com/errata/RHSA-2026:54769 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:64805 https://access.redhat.com/errata/RHSA-2026:67140 https://access.redhat.com/errata/RHSA-2026:67142 https://access.redhat.com/errata/RHSA-2026:67144 https://access.redhat.com/security/cve/CVE-2026-54369 https://bugzilla.redhat.com/2490277 https://bugzilla.redhat.com/2490279 https://bugzilla.redhat.com/show_bug.cgi?id=2490277 https://bugzilla.redhat.com/show_bug.cgi?id=2490279 https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5 https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370 https://errata.almalinux.org/9/ALSA-2026-42736.html https://errata.rockylinux.org/RLSA-2026:42736 https://linux.oracle.com/cve/CVE-2026-54369.html https://linux.oracle.com/errata/ELSA-2026-43420.html https://nvd.nist.gov/vuln/detail/CVE-2026-54369 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json https://www.cve.org/CVERecord?id=CVE-2026-54369 https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions
libapt-pkg7.0	CVE-2026-109518	HIGH	3.0.3	3.0.4	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
libavcodec61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavcodec61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavcodec61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavcodec61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavcodec61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavcodec61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavcodec61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavcodec61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavcodec61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavcodec61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavcodec61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavcodec61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavcodec61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavcodec61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavcodec61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavcodec61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavcodec61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavdevice61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavdevice61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavdevice61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavdevice61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavdevice61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavdevice61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavdevice61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavdevice61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavdevice61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavdevice61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavdevice61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavdevice61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavdevice61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavdevice61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavdevice61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavdevice61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavdevice61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavfilter10	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavfilter10	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavfilter10	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavfilter10	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavfilter10	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavfilter10	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavfilter10	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavfilter10	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavfilter10	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavfilter10	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavfilter10	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavfilter10	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavfilter10	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavfilter10	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavfilter10	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavfilter10	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavfilter10	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavformat61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavformat61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavformat61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavformat61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavformat61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavformat61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavformat61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavformat61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavformat61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavformat61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavformat61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavformat61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavformat61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavformat61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavformat61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavformat61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavformat61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavutil59	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavutil59	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavutil59	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavutil59	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavutil59	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavutil59	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavutil59	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavutil59	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavutil59	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavutil59	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavutil59	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavutil59	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavutil59	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavutil59	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavutil59	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavutil59	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavutil59	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libblkid1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libblkid1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libblkid1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libblkid1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libbrotli1	CVE-2026-111497	CRITICAL	1.1.0-2+b7	1.1.0-2+deb13u1	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libcjson1	CVE-2026-16554	HIGH	1.7.18-3.1+deb13u1		http://www.openwall.com/lists/oss-security/2026/07/30/26 http://www.openwall.com/lists/oss-security/2026/07/31/4 https://access.redhat.com/security/cve/CVE-2026-16554 https://cert.pl/en/posts/2026/07/CVE-2026-16554 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-16554 https://www.cve.org/CVERecord?id=CVE-2026-16554
libcjson1	CVE-2026-29036	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-29036 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-29036 https://www.cve.org/CVERecord?id=CVE-2026-29036 https://www.vulncheck.com/advisories/cjson-wrong-key-modification-via-json-pointer-escape-decoding
libcjson1	CVE-2026-67215	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-67215 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67215 https://www.cve.org/CVERecord?id=CVE-2026-67215 https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion
libcjson1	CVE-2026-67216	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-67216 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67216 https://www.cve.org/CVERecord?id=CVE-2026-67216 https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service
libcjson1	CVE-2026-87933	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-87933 https://github.com/DaveGamble/cJSON/ https://github.com/DaveGamble/cJSON/issues/1060 https://github.com/DaveGamble/cJSON/pull/1065 https://nvd.nist.gov/vuln/detail/CVE-2026-87933 https://vuldb.com/cve/CVE-2026-87933 https://vuldb.com/submit/911136 https://vuldb.com/vuln/401815 https://vuldb.com/vuln/401815/cti https://www.cve.org/CVERecord?id=CVE-2026-87933
libexpat1	CVE-2026-113351	HIGH	2.8.3-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-113351 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 https://github.com/libexpat/libexpat/pull/1431 https://nvd.nist.gov/vuln/detail/CVE-2026-113351 https://www.cve.org/CVERecord?id=CVE-2026-113351 https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
libexpat1	CVE-2026-115506	HIGH	2.8.3-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-115506 https://github.com/hannob/lololol https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/issues/1160 https://github.com/libexpat/libexpat/pull/1433 https://nvd.nist.gov/vuln/detail/CVE-2026-115506 https://www.cve.org/CVERecord?id=CVE-2026-115506 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay
libexpat1	CVE-2026-117610	HIGH	2.8.3-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-117610 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510 https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d https://github.com/libexpat/libexpat/pull/1444 https://nvd.nist.gov/vuln/detail/CVE-2026-117610 https://www.cve.org/CVERecord?id=CVE-2026-117610 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
libexpat1	CVE-2026-118370	HIGH	2.8.3-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-118370 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140 https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c https://github.com/libexpat/libexpat/pull/1450 https://nvd.nist.gov/vuln/detail/CVE-2026-118370 https://www.cve.org/CVERecord?id=CVE-2026-118370 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes
libexpat1	CVE-2026-66046	HIGH	2.8.3-1~deb13u1	2.9.0-1~deb13u1	https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-66046 https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat/pull/1321 https://linux.oracle.com/cve/CVE-2026-66046.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-66046 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-66046 https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity
libexpat1	CVE-2026-76956	HIGH	2.8.3-1~deb13u1	2.9.0-1~deb13u1	https://access.redhat.com/security/cve/CVE-2026-76956 https://github.com/libexpat/libexpat/pull/1326 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76956 https://www.cve.org/CVERecord?id=CVE-2026-76956
libexpat1	CVE-2026-76957	HIGH	2.8.3-1~deb13u1	2.9.0-1~deb13u1	https://access.redhat.com/security/cve/CVE-2026-76957 https://github.com/libexpat/libexpat/pull/1322 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76957 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-76957
libexpat1	CVE-2026-77214	HIGH	2.8.3-1~deb13u1	2.9.0-1~deb13u1	https://access.redhat.com/errata/RHSA-2026:88247 https://access.redhat.com/security/cve/CVE-2026-77214 https://bugzilla.redhat.com/2543288 https://bugzilla.redhat.com/2547476 https://bugzilla.redhat.com/show_bug.cgi?id=2543288 https://bugzilla.redhat.com/show_bug.cgi?id=2547476 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102633 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77214 https://errata.almalinux.org/9/ALSA-2026-88247.html https://errata.rockylinux.org/RLSA-2026:88247 https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0 https://github.com/libexpat/libexpat/pull/1393 https://linux.oracle.com/cve/CVE-2026-77214.html https://linux.oracle.com/errata/ELSA-2026-92323.html https://nvd.nist.gov/vuln/detail/CVE-2026-77214 https://www.cve.org/CVERecord?id=CVE-2026-77214 https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer
libexpat1	CVE-2026-93990	HIGH	2.8.3-1~deb13u1	2.9.0-1~deb13u1	https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-93990 https://blog.hartwork.org/posts/expat-2-8-5-released/ https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a https://github.com/libexpat/libexpat/pull/1282 https://github.com/libexpat/libexpat/releases/tag/R_2_8_5 https://linux.oracle.com/cve/CVE-2026-93990.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-93990 https://www.cve.org/CVERecord?id=CVE-2026-93990 https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate
liblastlog2-2	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
liblastlog2-2	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
liblastlog2-2	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
liblastlog2-2	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libmount1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libmount1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libmount1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libmount1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libncursesw6	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
libpcre2-8-0	CVE-2026-103111	HIGH	10.46-1~deb13u2	10.46-1~deb13u3	https://access.redhat.com/errata/RHSA-2026:81532 https://access.redhat.com/security/cve/CVE-2026-103111 https://bugzilla.redhat.com/2528993 https://bugzilla.redhat.com/2531743 https://bugzilla.redhat.com/2531744 https://bugzilla.redhat.com/2531745 https://bugzilla.redhat.com/2531746 https://bugzilla.redhat.com/2531747 https://bugzilla.redhat.com/2543797 https://bugzilla.redhat.com/show_bug.cgi?id=2528993 https://bugzilla.redhat.com/show_bug.cgi?id=2531743 https://bugzilla.redhat.com/show_bug.cgi?id=2531744 https://bugzilla.redhat.com/show_bug.cgi?id=2531745 https://bugzilla.redhat.com/show_bug.cgi?id=2531746 https://bugzilla.redhat.com/show_bug.cgi?id=2531747 https://bugzilla.redhat.com/show_bug.cgi?id=2543797 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161 https://errata.almalinux.org/9/ALSA-2026-81532.html https://errata.rockylinux.org/RLSA-2026:81532 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m https://linux.oracle.com/cve/CVE-2026-103111.html https://linux.oracle.com/errata/ELSA-2026-84799.html https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2026-103111 https://ubuntu.com/security/notices/USN-8974-1 https://www.cve.org/CVERecord?id=CVE-2026-103111
libpostproc58	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libpostproc58	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libpostproc58	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libpostproc58	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libpostproc58	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libpostproc58	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libpostproc58	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libpostproc58	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libpostproc58	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libpostproc58	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libpostproc58	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libpostproc58	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libpostproc58	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libpostproc58	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libpostproc58	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libpostproc58	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libpostproc58	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
librsvg2-2	CVE-2026-96889	HIGH	2.60.0+dfsg-1	2.60.0+dfsg-1+deb13u1	https://access.redhat.com/errata/RHSA-2026:86331 https://access.redhat.com/errata/RHSA-2026:86841 https://access.redhat.com/errata/RHSA-2026:86842 https://access.redhat.com/errata/RHSA-2026:86921 https://access.redhat.com/errata/RHSA-2026:92212 https://access.redhat.com/errata/RHSA-2026:92213 https://access.redhat.com/errata/RHSA-2026:92214 https://access.redhat.com/errata/RHSA-2026:92218 https://access.redhat.com/errata/RHSA-2026:92336 https://access.redhat.com/errata/RHSA-2026:92353 https://access.redhat.com/errata/RHSA-2026:92382 https://access.redhat.com/errata/RHSA-2026:92573 https://access.redhat.com/errata/RHSA-2026:92579 https://access.redhat.com/errata/RHSA-2026:94452 https://access.redhat.com/errata/RHSA-2026:94453 https://access.redhat.com/errata/RHSA-2026:94454 https://access.redhat.com/errata/RHSA-2026:94455 https://access.redhat.com/errata/RHSA-2026:94457 https://access.redhat.com/errata/RHSA-2026:94458 https://access.redhat.com/errata/RHSA-2026:94459 https://access.redhat.com/errata/RHSA-2026:94460 https://access.redhat.com/errata/RHSA-2026:94461 https://access.redhat.com/errata/RHSA-2026:94462 https://access.redhat.com/errata/RHSA-2026:94463 https://access.redhat.com/errata/RHSA-2026:94464 https://access.redhat.com/errata/RHSA-2026:94465 https://access.redhat.com/errata/RHSA-2026:94466 https://access.redhat.com/errata/RHSA-2026:94467 https://access.redhat.com/errata/RHSA-2026:94468 https://access.redhat.com/errata/RHSA-2026:94469 https://access.redhat.com/errata/RHSA-2026:94470 https://access.redhat.com/errata/RHSA-2026:94471 https://access.redhat.com/errata/RHSA-2026:94472 https://access.redhat.com/errata/RHSA-2026:94473 https://access.redhat.com/errata/RHSA-2026:94474 https://access.redhat.com/errata/RHSA-2026:94476 https://access.redhat.com/security/cve/CVE-2026-96889 https://bugzilla.redhat.com/2539279 https://bugzilla.redhat.com/show_bug.cgi?id=2539279 https://crates.io/crates/librsvg https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96889 https://errata.almalinux.org/9/ALSA-2026-86921.html https://errata.rockylinux.org/RLSA-2026:86921 https://github.com/GNOME/librsvg/blob/2.63.2/NEWS https://github.com/GNOME/librsvg/commit/0bc935e675947e185d42005d3ad93d7cf61bcea9 https://github.com/GNOME/librsvg/commit/1606574427408baca8203ef723281509a229f9e2 https://github.com/GNOME/librsvg/commit/4d0051a9dbd038a5fe8461b61486677d88f8736d https://github.com/GNOME/librsvg/commit/e56cc8a33a7184eef6e8a720414aee6205a400ad https://github.com/GNOME/librsvg/releases/tag/2.57.5 https://github.com/GNOME/librsvg/releases/tag/2.60.3 https://github.com/GNOME/librsvg/releases/tag/2.61.5 https://github.com/GNOME/librsvg/releases/tag/2.62.4 https://github.com/GNOME/librsvg/releases/tag/2.63.2 https://gitlab.gnome.org/GNOME/librsvg https://gitlab.gnome.org/GNOME/librsvg/-/commit/8a1b0cd319e9af2d1e9cf878081dd77f227a0504 https://gitlab.gnome.org/GNOME/librsvg/-/merge_requests/1211 https://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241 https://linux.oracle.com/cve/CVE-2026-96889.html https://linux.oracle.com/errata/ELSA-2026-86921.html https://nvd.nist.gov/vuln/detail/CVE-2026-96889 https://rustsec.org/advisories/RUSTSEC-2026-0305.html https://ubuntu.com/security/notices/USN-8891-1 https://www.cve.org/CVERecord?id=CVE-2026-96889
libsmartcols1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libsmartcols1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libsmartcols1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libsmartcols1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libsndfile1	CVE-2026-37555	HIGH	1.2.2-2+deb13u1		https://access.redhat.com/errata/RHSA-2026:19559 https://access.redhat.com/errata/RHSA-2026:19560 https://access.redhat.com/errata/RHSA-2026:19610 https://access.redhat.com/errata/RHSA-2026:23221 https://access.redhat.com/errata/RHSA-2026:23222 https://access.redhat.com/errata/RHSA-2026:23223 https://access.redhat.com/errata/RHSA-2026:25092 https://access.redhat.com/errata/RHSA-2026:25197 https://access.redhat.com/errata/RHSA-2026:25198 https://access.redhat.com/errata/RHSA-2026:25227 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/security/cve/CVE-2026-37555 https://bugzilla.redhat.com/2463856 https://bugzilla.redhat.com/show_bug.cgi?id=2463856 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-37555 https://errata.almalinux.org/9/ALSA-2026-19610.html https://errata.rockylinux.org/RLSA-2026:19610 https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 https://github.com/libsndfile/libsndfile/issues/833 https://linux.oracle.com/cve/CVE-2026-37555.html https://linux.oracle.com/errata/ELSA-2026-19610.html https://nvd.nist.gov/vuln/detail/CVE-2026-37555 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json https://www.cve.org/CVERecord?id=CVE-2026-37555 https://www.openwall.com/lists/oss-security/2026/04/30/7
libsqlite3-0	CVE-2026-119373	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge https://access.redhat.com/security/cve/CVE-2026-119373 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107 https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80 https://nvd.nist.gov/vuln/detail/CVE-2026-119373 https://sqlite.org/bugs/info/2026-08-04T08:49:27Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/a7f8c92f62 https://www.cve.org/CVERecord?id=CVE-2026-119373 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists
libsqlite3-0	CVE-2026-119374	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-fts5-securedel https://access.redhat.com/security/cve/CVE-2026-119374 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525 https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9 https://nvd.nist.gov/vuln/detail/CVE-2026-119374 https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/9cd4f9e920 https://www.cve.org/CVERecord?id=CVE-2026-119374 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete
libsqlite3-0	CVE-2026-119379	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-session-ncol https://access.redhat.com/security/cve/CVE-2026-119379 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619 https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52 https://nvd.nist.gov/vuln/detail/CVE-2026-119379 https://sqlite.org/bugs/info/2026-08-16T10:15:25Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/3f57024aecea0f3b https://www.cve.org/CVERecord?id=CVE-2026-119379 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind
libssl3t64	CVE-2026-84782	HIGH	3.5.7-1~deb13u2	3.5.7-1~deb13u3	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
libswresample5	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libswresample5	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libswresample5	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libswresample5	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libswresample5	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libswresample5	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libswresample5	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libswresample5	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libswresample5	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libswresample5	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libswresample5	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libswresample5	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libswresample5	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libswresample5	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libswresample5	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libswresample5	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libswresample5	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libswscale8	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libswscale8	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libswscale8	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libswscale8	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libswscale8	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libswscale8	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libswscale8	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libswscale8	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libswscale8	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libswscale8	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libswscale8	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libswscale8	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libswscale8	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libswscale8	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libswscale8	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libswscale8	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libswscale8	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libsystemd0	CVE-2026-16742	HIGH	257.13-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742
libtiff6	CVE-2026-36849	HIGH	4.7.0-3+deb13u3
libtiff6	CVE-2026-52490	HIGH	4.7.0-3+deb13u3		https://access.redhat.com/errata/RHSA-2026:69095 https://access.redhat.com/security/cve/CVE-2026-52490 https://bugzilla.redhat.com/2523148 https://bugzilla.redhat.com/show_bug.cgi?id=2523148 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490 https://errata.almalinux.org/8/ALSA-2026-69095.html https://errata.rockylinux.org/RLSA-2026:69095 https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671 https://gitlab.com/libtiff/libtiff/-/work_items/846 https://linux.oracle.com/cve/CVE-2026-52490.html https://linux.oracle.com/errata/ELSA-2026-69095.html https://nvd.nist.gov/vuln/detail/CVE-2026-52490 https://www.cve.org/CVERecord?id=CVE-2026-52490
libtinfo6	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
libudev1	CVE-2026-16742	HIGH	257.13-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742
libuuid1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libuuid1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libuuid1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libuuid1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libx11-6	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libx11-data	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libx11-xcb1	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libxi6	CVE-2026-109089	HIGH	2:1.8.2-1		https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109089 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0 https://linux.oracle.com/cve/CVE-2026-109089.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109089 https://www.cve.org/CVERecord?id=CVE-2026-109089
libxi6	CVE-2026-109090	HIGH	2:1.8.2-1		https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109090 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6 https://linux.oracle.com/cve/CVE-2026-109090.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109090 https://www.cve.org/CVERecord?id=CVE-2026-109090
libxml2	CVE-2026-6653	CRITICAL	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:61247 https://access.redhat.com/security/cve/CVE-2026-6653 https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260 https://bugzilla.redhat.com/2491354 https://bugzilla.redhat.com/2494191 https://bugzilla.redhat.com/show_bug.cgi?id=2491354 https://bugzilla.redhat.com/show_bug.cgi?id=2494191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11979 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6653 https://errata.almalinux.org/9/ALSA-2026-61247.html https://errata.rockylinux.org/RLSA-2026:61247 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058 https://linux.oracle.com/cve/CVE-2026-6653.html https://linux.oracle.com/errata/ELSA-2026-69655.html https://nvd.nist.gov/vuln/detail/CVE-2026-6653 https://ubuntu.com/security/notices/USN-8456-1 https://www.cve.org/CVERecord?id=CVE-2026-6653
libxml2	CVE-2026-74860	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:64463 https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/errata/RHSA-2026:71586 https://access.redhat.com/errata/RHSA-2026:71641 https://access.redhat.com/errata/RHSA-2026:72470 https://access.redhat.com/errata/RHSA-2026:72475 https://access.redhat.com/errata/RHSA-2026:72476 https://access.redhat.com/errata/RHSA-2026:79357 https://access.redhat.com/errata/RHSA-2026:82939 https://access.redhat.com/errata/RHSA-2026:89750 https://access.redhat.com/errata/RHSA-2026:89759 https://access.redhat.com/errata/RHSA-2026:90309 https://access.redhat.com/errata/RHSA-2026:91202 https://access.redhat.com/errata/RHSA-2026:91204 https://access.redhat.com/errata/RHSA-2026:91206 https://access.redhat.com/errata/RHSA-2026:91207 https://access.redhat.com/errata/RHSA-2026:91217 https://access.redhat.com/errata/RHSA-2026:91218 https://access.redhat.com/errata/RHSA-2026:91219 https://access.redhat.com/errata/RHSA-2026:91224 https://access.redhat.com/errata/RHSA-2026:91232 https://access.redhat.com/errata/RHSA-2026:91233 https://access.redhat.com/errata/RHSA-2026:91234 https://access.redhat.com/errata/RHSA-2026:91235 https://access.redhat.com/errata/RHSA-2026:91236 https://access.redhat.com/errata/RHSA-2026:91237 https://access.redhat.com/errata/RHSA-2026:91238 https://access.redhat.com/errata/RHSA-2026:91241 https://access.redhat.com/errata/RHSA-2026:91242 https://access.redhat.com/errata/RHSA-2026:91243 https://access.redhat.com/errata/RHSA-2026:91244 https://access.redhat.com/errata/RHSA-2026:91245 https://access.redhat.com/errata/RHSA-2026:91246 https://access.redhat.com/errata/RHSA-2026:91248 https://access.redhat.com/errata/RHSA-2026:91249 https://access.redhat.com/errata/RHSA-2026:92352 https://access.redhat.com/errata/RHSA-2026:92589 https://access.redhat.com/errata/RHSA-2026:93463 https://access.redhat.com/errata/RHSA-2026:93473 https://access.redhat.com/errata/RHSA-2026:93791 https://access.redhat.com/errata/RHSA-2026:94459 https://access.redhat.com/errata/RHSA-2026:94468 https://access.redhat.com/errata/RHSA-2026:94474 https://access.redhat.com/errata/RHSA-2026:94476 https://access.redhat.com/security/cve/CVE-2026-74860 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://linux.oracle.com/cve/CVE-2026-74860.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-74860 https://ubuntu.com/security/notices/USN-8787-1 https://www.cve.org/CVERecord?id=CVE-2026-74860
libxml2	CVE-2026-86138	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86138 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86138.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86138 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86138
libxml2	CVE-2026-86139	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/security/cve/CVE-2026-86139 https://github.com/GNOME/libxml2/commit/8edbbdb09f24d26a2f900141fddc2b9d014f53b0 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://nvd.nist.gov/vuln/detail/CVE-2026-86139 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86139
libxml2	CVE-2026-86140	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86140 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86140.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86140 https://ubuntu.com/security/notices/USN-8787-1 https://www.cve.org/CVERecord?id=CVE-2026-86140
libxml2	CVE-2026-86142	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86142 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113 https://linux.oracle.com/cve/CVE-2026-86142.html https://linux.oracle.com/errata/ELSA-2026-80675.html https://nvd.nist.gov/vuln/detail/CVE-2026-86142 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86142
libxml2	CVE-2026-86143	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86143 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111 https://linux.oracle.com/cve/CVE-2026-86143.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86143 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86143
libxml2	CVE-2026-86144	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86144 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86144.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86144 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86144
libxrender1	CVE-2026-88807	HIGH	1:0.9.12-1		https://access.redhat.com/errata/RHSA-2026:91057 https://access.redhat.com/security/cve/CVE-2026-88807 https://bugzilla.redhat.com/2537924 https://bugzilla.redhat.com/show_bug.cgi?id=2537924 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88807 https://errata.almalinux.org/9/ALSA-2026-91057.html https://errata.rockylinux.org/RLSA-2026:91057 https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19 https://linux.oracle.com/cve/CVE-2026-88807.html https://linux.oracle.com/errata/ELSA-2026-91267.html https://nvd.nist.gov/vuln/detail/CVE-2026-88807 https://www.cve.org/CVERecord?id=CVE-2026-88807
login	CVE-2026-76642	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
login	CVE-2026-78408	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
login	CVE-2026-78409	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
login	CVE-2026-78410	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
mount	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
mount	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
mount	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
mount	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
ncurses-base	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
ncurses-bin	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
openssl	CVE-2026-84782	HIGH	3.5.7-1~deb13u2	3.5.7-1~deb13u3	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
openssl-provider-legacy	CVE-2026-84782	HIGH	3.5.7-1~deb13u2	3.5.7-1~deb13u3	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
perl-base	CVE-2026-9538	HIGH	5.40.1-6+deb13u1		http://www.openwall.com/lists/oss-security/2026/05/26/4 https://access.redhat.com/errata/RHSA-2026:49525 https://access.redhat.com/security/cve/CVE-2026-9538 https://bugzilla.redhat.com/2481315 https://bugzilla.redhat.com/show_bug.cgi?id=2481315 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538 https://errata.almalinux.org/9/ALSA-2026-49525.html https://errata.rockylinux.org/RLSA-2026:49525 https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch https://linux.oracle.com/cve/CVE-2026-9538.html https://linux.oracle.com/errata/ELSA-2026-49525.html https://lists.security.metacpan.org/cve-announce/msg/40396448/ https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes https://nvd.nist.gov/vuln/detail/CVE-2026-9538 https://ubuntu.com/security/notices/USN-8684-1 https://www.cve.org/CVERecord?id=CVE-2026-9538
util-linux	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
util-linux	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
util-linux	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
util-linux	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
zlib1g	CVE-2026-76844	HIGH	1:1.3.dfsg+really1.3.1-1+b1	1:1.3.dfsg+really1.3.1-1+deb13u1	https://access.redhat.com/security/cve/CVE-2026-76844 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/advisories/GHSA-wr3j-pwj9-hqq6 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148 https://github.com/webpack/webpack-dev-middleware https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b https://github.com/webpack/webpack-dev-middleware/pull/2404 https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6 https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0 https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c https://nvd.nist.gov/vuln/detail/CVE-2026-76844 https://www.cve.org/CVERecord?id=CVE-2026-76844 https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
zlib1g	CVE-2026-85091	HIGH	1:1.3.dfsg+really1.3.1-1+b1	1:1.3.dfsg+really1.3.1-1+deb13u1	https://access.redhat.com/security/cve/CVE-2026-85091 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://nvd.nist.gov/vuln/detail/CVE-2026-85091 https://ubuntu.com/security/notices/USN-8954-1 https://www.cve.org/CVERecord?id=CVE-2026-85091 https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
No Misconfigurations found
python-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2026.7.22	2026.10.18	https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2 https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 https://emudhra.we-have-a-problem.com https://github.com/advisories/GHSA-6q48-6c7w-9gw2 https://github.com/certifi/python-certifi https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
No Misconfigurations found

apt

CVE-2026-109518

HIGH

3.0.3

3.0.4

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

bsdutils

CVE-2026-76642

HIGH

1:2.41.5-0+deb13u1

bsdutils

CVE-2026-78408

HIGH

1:2.41.5-0+deb13u1

bsdutils

CVE-2026-78409

HIGH

1:2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

bsdutils

CVE-2026-78410

HIGH

1:2.41.5-0+deb13u1

ffmpeg

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

ffmpeg

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

ffmpeg

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

ffmpeg

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

ffmpeg

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

ffmpeg

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

ffmpeg

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

ffmpeg

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

ffmpeg

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

ffmpeg

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

ffmpeg

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

ffmpeg

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

ffmpeg

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

ffmpeg

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

ffmpeg

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

ffmpeg

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

ffmpeg

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libacl1

CVE-2026-54369

HIGH

2.3.2-2+b1

libapt-pkg7.0

CVE-2026-109518

HIGH

3.0.3

3.0.4

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

libavcodec61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavcodec61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavcodec61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavcodec61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavcodec61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavcodec61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavcodec61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavcodec61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavcodec61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavcodec61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavcodec61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavcodec61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavcodec61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavcodec61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavcodec61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavcodec61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavcodec61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavdevice61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavdevice61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavdevice61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavdevice61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavdevice61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavdevice61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavdevice61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavdevice61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavdevice61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavdevice61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavdevice61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavdevice61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavdevice61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavdevice61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavdevice61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavdevice61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavdevice61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavfilter10

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavfilter10

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavfilter10

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavfilter10

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavfilter10

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavfilter10

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavfilter10

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavfilter10

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavfilter10

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavfilter10

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavfilter10

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavfilter10

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavfilter10

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavfilter10

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavfilter10

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavfilter10

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavfilter10

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavformat61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavformat61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavformat61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavformat61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavformat61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavformat61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavformat61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavformat61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavformat61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavformat61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavformat61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavformat61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavformat61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavformat61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavformat61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavformat61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavformat61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavutil59

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavutil59

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavutil59

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavutil59

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavutil59

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavutil59

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavutil59

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavutil59

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavutil59

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavutil59

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavutil59

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavutil59

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavutil59

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavutil59

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavutil59

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavutil59

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavutil59

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libblkid1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libblkid1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libblkid1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libblkid1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libcjson1

CVE-2026-16554

HIGH

1.7.18-3.1+deb13u1

http://www.openwall.com/lists/oss-security/2026/07/30/26 http://www.openwall.com/lists/oss-security/2026/07/31/4 https://access.redhat.com/security/cve/CVE-2026-16554 https://cert.pl/en/posts/2026/07/CVE-2026-16554 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-16554 https://www.cve.org/CVERecord?id=CVE-2026-16554

libcjson1

CVE-2026-29036

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-29036 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-29036 https://www.cve.org/CVERecord?id=CVE-2026-29036 https://www.vulncheck.com/advisories/cjson-wrong-key-modification-via-json-pointer-escape-decoding

libcjson1

CVE-2026-67215

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-67215 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67215 https://www.cve.org/CVERecord?id=CVE-2026-67215 https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion

libcjson1

CVE-2026-67216

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-67216 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67216 https://www.cve.org/CVERecord?id=CVE-2026-67216 https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service

libcjson1

CVE-2026-87933

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-87933 https://github.com/DaveGamble/cJSON/ https://github.com/DaveGamble/cJSON/issues/1060 https://github.com/DaveGamble/cJSON/pull/1065 https://nvd.nist.gov/vuln/detail/CVE-2026-87933 https://vuldb.com/cve/CVE-2026-87933 https://vuldb.com/submit/911136 https://vuldb.com/vuln/401815 https://vuldb.com/vuln/401815/cti https://www.cve.org/CVERecord?id=CVE-2026-87933

libexpat1

CVE-2026-113351

HIGH

2.8.3-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-113351 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 https://github.com/libexpat/libexpat/pull/1431 https://nvd.nist.gov/vuln/detail/CVE-2026-113351 https://www.cve.org/CVERecord?id=CVE-2026-113351 https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset

libexpat1

CVE-2026-115506

HIGH

2.8.3-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-115506 https://github.com/hannob/lololol https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/issues/1160 https://github.com/libexpat/libexpat/pull/1433 https://nvd.nist.gov/vuln/detail/CVE-2026-115506 https://www.cve.org/CVERecord?id=CVE-2026-115506 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay

libexpat1

CVE-2026-117610

HIGH

2.8.3-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-117610 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510 https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d https://github.com/libexpat/libexpat/pull/1444 https://nvd.nist.gov/vuln/detail/CVE-2026-117610 https://www.cve.org/CVERecord?id=CVE-2026-117610 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser

libexpat1

CVE-2026-118370

HIGH

2.8.3-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-118370 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140 https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c https://github.com/libexpat/libexpat/pull/1450 https://nvd.nist.gov/vuln/detail/CVE-2026-118370 https://www.cve.org/CVERecord?id=CVE-2026-118370 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes

libexpat1

CVE-2026-66046

HIGH

2.8.3-1~deb13u1

2.9.0-1~deb13u1

https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-66046 https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat/pull/1321 https://linux.oracle.com/cve/CVE-2026-66046.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-66046 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-66046 https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity

libexpat1

CVE-2026-76956

HIGH

2.8.3-1~deb13u1

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-76956 https://github.com/libexpat/libexpat/pull/1326 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76956 https://www.cve.org/CVERecord?id=CVE-2026-76956

libexpat1

CVE-2026-76957

HIGH

2.8.3-1~deb13u1

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-76957 https://github.com/libexpat/libexpat/pull/1322 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76957 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-76957

libexpat1

CVE-2026-77214

HIGH

2.8.3-1~deb13u1

2.9.0-1~deb13u1

https://access.redhat.com/errata/RHSA-2026:88247 https://access.redhat.com/security/cve/CVE-2026-77214 https://bugzilla.redhat.com/2543288 https://bugzilla.redhat.com/2547476 https://bugzilla.redhat.com/show_bug.cgi?id=2543288 https://bugzilla.redhat.com/show_bug.cgi?id=2547476 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102633 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77214 https://errata.almalinux.org/9/ALSA-2026-88247.html https://errata.rockylinux.org/RLSA-2026:88247 https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0 https://github.com/libexpat/libexpat/pull/1393 https://linux.oracle.com/cve/CVE-2026-77214.html https://linux.oracle.com/errata/ELSA-2026-92323.html https://nvd.nist.gov/vuln/detail/CVE-2026-77214 https://www.cve.org/CVERecord?id=CVE-2026-77214 https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer

libexpat1

CVE-2026-93990

HIGH

2.8.3-1~deb13u1

2.9.0-1~deb13u1

https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-93990 https://blog.hartwork.org/posts/expat-2-8-5-released/ https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a https://github.com/libexpat/libexpat/pull/1282 https://github.com/libexpat/libexpat/releases/tag/R_2_8_5 https://linux.oracle.com/cve/CVE-2026-93990.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-93990 https://www.cve.org/CVERecord?id=CVE-2026-93990 https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate

liblastlog2-2

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

liblastlog2-2

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

liblastlog2-2

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

liblastlog2-2

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libmount1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libncursesw6

CVE-2025-69720

HIGH

6.5+20250216-2

https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720

libpcre2-8-0

CVE-2026-103111

HIGH

10.46-1~deb13u2

10.46-1~deb13u3

libpostproc58

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libpostproc58

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libpostproc58

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libpostproc58

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libpostproc58

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libpostproc58

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libpostproc58

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libpostproc58

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libpostproc58

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libpostproc58

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libpostproc58

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libpostproc58

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libpostproc58

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libpostproc58

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libpostproc58

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libpostproc58

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libpostproc58

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

librsvg2-2

CVE-2026-96889

HIGH

2.60.0+dfsg-1

2.60.0+dfsg-1+deb13u1

libsmartcols1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libsmartcols1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libsmartcols1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libsmartcols1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libsndfile1

CVE-2026-37555

HIGH

1.2.2-2+deb13u1

https://access.redhat.com/errata/RHSA-2026:19559 https://access.redhat.com/errata/RHSA-2026:19560 https://access.redhat.com/errata/RHSA-2026:19610 https://access.redhat.com/errata/RHSA-2026:23221 https://access.redhat.com/errata/RHSA-2026:23222 https://access.redhat.com/errata/RHSA-2026:23223 https://access.redhat.com/errata/RHSA-2026:25092 https://access.redhat.com/errata/RHSA-2026:25197 https://access.redhat.com/errata/RHSA-2026:25198 https://access.redhat.com/errata/RHSA-2026:25227 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/security/cve/CVE-2026-37555 https://bugzilla.redhat.com/2463856 https://bugzilla.redhat.com/show_bug.cgi?id=2463856 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-37555 https://errata.almalinux.org/9/ALSA-2026-19610.html https://errata.rockylinux.org/RLSA-2026:19610 https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 https://github.com/libsndfile/libsndfile/issues/833 https://linux.oracle.com/cve/CVE-2026-37555.html https://linux.oracle.com/errata/ELSA-2026-19610.html https://nvd.nist.gov/vuln/detail/CVE-2026-37555 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json https://www.cve.org/CVERecord?id=CVE-2026-37555 https://www.openwall.com/lists/oss-security/2026/04/30/7

libsqlite3-0

CVE-2026-119373

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge https://access.redhat.com/security/cve/CVE-2026-119373 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107 https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80 https://nvd.nist.gov/vuln/detail/CVE-2026-119373 https://sqlite.org/bugs/info/2026-08-04T08:49:27Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/a7f8c92f62 https://www.cve.org/CVERecord?id=CVE-2026-119373 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists

libsqlite3-0

CVE-2026-119374

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-fts5-securedel https://access.redhat.com/security/cve/CVE-2026-119374 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525 https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9 https://nvd.nist.gov/vuln/detail/CVE-2026-119374 https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/9cd4f9e920 https://www.cve.org/CVERecord?id=CVE-2026-119374 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete

libsqlite3-0

CVE-2026-119379

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-session-ncol https://access.redhat.com/security/cve/CVE-2026-119379 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619 https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52 https://nvd.nist.gov/vuln/detail/CVE-2026-119379 https://sqlite.org/bugs/info/2026-08-16T10:15:25Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/3f57024aecea0f3b https://www.cve.org/CVERecord?id=CVE-2026-119379 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind

libssl3t64

CVE-2026-84782

HIGH

3.5.7-1~deb13u2

3.5.7-1~deb13u3

https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782

libswresample5

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libswresample5

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libswresample5

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libswresample5

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libswresample5

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libswresample5

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libswresample5

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libswresample5

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libswresample5

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libswresample5

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libswresample5

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libswresample5

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libswresample5

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libswresample5

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libswresample5

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libswresample5

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libswresample5

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libswscale8

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libswscale8

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libswscale8

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libswscale8

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libswscale8

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libswscale8

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libswscale8

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libswscale8

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libswscale8

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libswscale8

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libswscale8

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libswscale8

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libswscale8

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libswscale8

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libswscale8

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libswscale8

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libswscale8

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libsystemd0

CVE-2026-16742

HIGH

257.13-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742

libtiff6

CVE-2026-36849

HIGH

4.7.0-3+deb13u3

libtiff6

CVE-2026-52490

HIGH

4.7.0-3+deb13u3

https://access.redhat.com/errata/RHSA-2026:69095 https://access.redhat.com/security/cve/CVE-2026-52490 https://bugzilla.redhat.com/2523148 https://bugzilla.redhat.com/show_bug.cgi?id=2523148 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490 https://errata.almalinux.org/8/ALSA-2026-69095.html https://errata.rockylinux.org/RLSA-2026:69095 https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671 https://gitlab.com/libtiff/libtiff/-/work_items/846 https://linux.oracle.com/cve/CVE-2026-52490.html https://linux.oracle.com/errata/ELSA-2026-69095.html https://nvd.nist.gov/vuln/detail/CVE-2026-52490 https://www.cve.org/CVERecord?id=CVE-2026-52490

libtinfo6

CVE-2025-69720

HIGH

6.5+20250216-2

https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720

libudev1

CVE-2026-16742

HIGH

257.13-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742

libuuid1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libuuid1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libuuid1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libuuid1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libx11-6

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libx11-data

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libx11-xcb1

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libxi6

CVE-2026-109089

HIGH

2:1.8.2-1

https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109089 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0 https://linux.oracle.com/cve/CVE-2026-109089.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109089 https://www.cve.org/CVERecord?id=CVE-2026-109089

libxi6

CVE-2026-109090

HIGH

2:1.8.2-1

https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109090 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6 https://linux.oracle.com/cve/CVE-2026-109090.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109090 https://www.cve.org/CVERecord?id=CVE-2026-109090

libxml2

CVE-2026-74860

HIGH