meetings-stack-meet-diarizer (debian 13.7) - Trivy Report - 2026-11-08 04:00:41.246338493 +0100 CET m=+0.050075633

debian
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
apt	CVE-2026-109518	HIGH	3.0.3	3.0.4	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
bsdutils	CVE-2026-76642	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
bsdutils	CVE-2026-78408	HIGH	1:2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
bsdutils	CVE-2026-78409	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
bsdutils	CVE-2026-78410	HIGH	1:2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
ffmpeg	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
ffmpeg	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
ffmpeg	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
ffmpeg	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
ffmpeg	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
ffmpeg	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
ffmpeg	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
ffmpeg	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
ffmpeg	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
ffmpeg	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
ffmpeg	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
ffmpeg	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
ffmpeg	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
ffmpeg	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
ffmpeg	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
ffmpeg	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
ffmpeg	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libacl1	CVE-2026-54369	HIGH	2.3.2-2+b1		https://access.redhat.com/errata/RHSA-2026:34351 https://access.redhat.com/errata/RHSA-2026:42736 https://access.redhat.com/errata/RHSA-2026:42739 https://access.redhat.com/errata/RHSA-2026:43420 https://access.redhat.com/errata/RHSA-2026:44481 https://access.redhat.com/errata/RHSA-2026:46836 https://access.redhat.com/errata/RHSA-2026:50205 https://access.redhat.com/errata/RHSA-2026:53371 https://access.redhat.com/errata/RHSA-2026:54769 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:64805 https://access.redhat.com/errata/RHSA-2026:67140 https://access.redhat.com/errata/RHSA-2026:67142 https://access.redhat.com/errata/RHSA-2026:67144 https://access.redhat.com/security/cve/CVE-2026-54369 https://bugzilla.redhat.com/2490277 https://bugzilla.redhat.com/2490279 https://bugzilla.redhat.com/show_bug.cgi?id=2490277 https://bugzilla.redhat.com/show_bug.cgi?id=2490279 https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5 https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370 https://errata.almalinux.org/9/ALSA-2026-42736.html https://errata.rockylinux.org/RLSA-2026:42736 https://linux.oracle.com/cve/CVE-2026-54369.html https://linux.oracle.com/errata/ELSA-2026-43420.html https://nvd.nist.gov/vuln/detail/CVE-2026-54369 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json https://www.cve.org/CVERecord?id=CVE-2026-54369 https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions
libapt-pkg7.0	CVE-2026-109518	HIGH	3.0.3	3.0.4	http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518
libavcodec61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavcodec61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavcodec61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavcodec61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavcodec61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavcodec61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavcodec61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavcodec61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavcodec61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavcodec61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavcodec61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavcodec61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavcodec61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavcodec61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavcodec61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavcodec61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavcodec61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavdevice61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavdevice61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavdevice61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavdevice61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavdevice61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavdevice61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavdevice61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavdevice61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavdevice61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavdevice61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavdevice61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavdevice61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavdevice61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavdevice61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavdevice61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavdevice61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavdevice61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavfilter10	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavfilter10	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavfilter10	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavfilter10	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavfilter10	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavfilter10	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavfilter10	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavfilter10	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavfilter10	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavfilter10	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavfilter10	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavfilter10	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavfilter10	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavfilter10	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavfilter10	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavfilter10	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavfilter10	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavformat61	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavformat61	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavformat61	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavformat61	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavformat61	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavformat61	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavformat61	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavformat61	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavformat61	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavformat61	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavformat61	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavformat61	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavformat61	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavformat61	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavformat61	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavformat61	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavformat61	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libavutil59	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libavutil59	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libavutil59	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libavutil59	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libavutil59	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libavutil59	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libavutil59	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libavutil59	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libavutil59	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libavutil59	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libavutil59	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libavutil59	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libavutil59	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libavutil59	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libavutil59	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libavutil59	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libavutil59	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libblkid1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libblkid1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libblkid1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libblkid1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libcjson1	CVE-2026-16554	HIGH	1.7.18-3.1+deb13u1		http://www.openwall.com/lists/oss-security/2026/07/30/26 http://www.openwall.com/lists/oss-security/2026/07/31/4 https://access.redhat.com/security/cve/CVE-2026-16554 https://cert.pl/en/posts/2026/07/CVE-2026-16554 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-16554 https://www.cve.org/CVERecord?id=CVE-2026-16554
libcjson1	CVE-2026-29036	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-29036 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-29036 https://www.cve.org/CVERecord?id=CVE-2026-29036 https://www.vulncheck.com/advisories/cjson-wrong-key-modification-via-json-pointer-escape-decoding
libcjson1	CVE-2026-67215	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-67215 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67215 https://www.cve.org/CVERecord?id=CVE-2026-67215 https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion
libcjson1	CVE-2026-67216	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-67216 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67216 https://www.cve.org/CVERecord?id=CVE-2026-67216 https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service
libcjson1	CVE-2026-87933	HIGH	1.7.18-3.1+deb13u1		https://access.redhat.com/security/cve/CVE-2026-87933 https://github.com/DaveGamble/cJSON/ https://github.com/DaveGamble/cJSON/issues/1060 https://github.com/DaveGamble/cJSON/pull/1065 https://nvd.nist.gov/vuln/detail/CVE-2026-87933 https://vuldb.com/cve/CVE-2026-87933 https://vuldb.com/submit/911136 https://vuldb.com/vuln/401815 https://vuldb.com/vuln/401815/cti https://www.cve.org/CVERecord?id=CVE-2026-87933
libexpat1	CVE-2026-113351	HIGH	2.9.0-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-113351 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 https://github.com/libexpat/libexpat/pull/1431 https://nvd.nist.gov/vuln/detail/CVE-2026-113351 https://www.cve.org/CVERecord?id=CVE-2026-113351 https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
libexpat1	CVE-2026-115506	HIGH	2.9.0-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-115506 https://github.com/hannob/lololol https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/issues/1160 https://github.com/libexpat/libexpat/pull/1433 https://nvd.nist.gov/vuln/detail/CVE-2026-115506 https://www.cve.org/CVERecord?id=CVE-2026-115506 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay
libexpat1	CVE-2026-117610	HIGH	2.9.0-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-117610 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510 https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d https://github.com/libexpat/libexpat/pull/1444 https://nvd.nist.gov/vuln/detail/CVE-2026-117610 https://www.cve.org/CVERecord?id=CVE-2026-117610 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
libexpat1	CVE-2026-118370	HIGH	2.9.0-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-118370 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140 https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c https://github.com/libexpat/libexpat/pull/1450 https://nvd.nist.gov/vuln/detail/CVE-2026-118370 https://www.cve.org/CVERecord?id=CVE-2026-118370 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes
liblastlog2-2	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
liblastlog2-2	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
liblastlog2-2	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
liblastlog2-2	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libmount1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libmount1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libmount1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libmount1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libncursesw6	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
libpostproc58	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libpostproc58	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libpostproc58	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libpostproc58	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libpostproc58	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libpostproc58	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libpostproc58	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libpostproc58	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libpostproc58	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libpostproc58	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libpostproc58	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libpostproc58	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libpostproc58	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libpostproc58	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libpostproc58	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libpostproc58	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libpostproc58	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libsmartcols1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libsmartcols1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libsmartcols1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libsmartcols1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libsndfile1	CVE-2026-37555	HIGH	1.2.2-2+deb13u1		https://access.redhat.com/errata/RHSA-2026:19559 https://access.redhat.com/errata/RHSA-2026:19560 https://access.redhat.com/errata/RHSA-2026:19610 https://access.redhat.com/errata/RHSA-2026:23221 https://access.redhat.com/errata/RHSA-2026:23222 https://access.redhat.com/errata/RHSA-2026:23223 https://access.redhat.com/errata/RHSA-2026:25092 https://access.redhat.com/errata/RHSA-2026:25197 https://access.redhat.com/errata/RHSA-2026:25198 https://access.redhat.com/errata/RHSA-2026:25227 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/security/cve/CVE-2026-37555 https://bugzilla.redhat.com/2463856 https://bugzilla.redhat.com/show_bug.cgi?id=2463856 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-37555 https://errata.almalinux.org/9/ALSA-2026-19610.html https://errata.rockylinux.org/RLSA-2026:19610 https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 https://github.com/libsndfile/libsndfile/issues/833 https://linux.oracle.com/cve/CVE-2026-37555.html https://linux.oracle.com/errata/ELSA-2026-19610.html https://nvd.nist.gov/vuln/detail/CVE-2026-37555 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json https://www.cve.org/CVERecord?id=CVE-2026-37555 https://www.openwall.com/lists/oss-security/2026/04/30/7
libsqlite3-0	CVE-2026-119373	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge https://access.redhat.com/security/cve/CVE-2026-119373 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107 https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80 https://nvd.nist.gov/vuln/detail/CVE-2026-119373 https://sqlite.org/bugs/info/2026-08-04T08:49:27Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/a7f8c92f62 https://www.cve.org/CVERecord?id=CVE-2026-119373 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists
libsqlite3-0	CVE-2026-119374	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-fts5-securedel https://access.redhat.com/security/cve/CVE-2026-119374 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525 https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9 https://nvd.nist.gov/vuln/detail/CVE-2026-119374 https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/9cd4f9e920 https://www.cve.org/CVERecord?id=CVE-2026-119374 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete
libsqlite3-0	CVE-2026-119379	HIGH	3.46.1-7+deb13u2		https://abraxaslabs.tech/research/sqlite-session-ncol https://access.redhat.com/security/cve/CVE-2026-119379 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619 https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52 https://nvd.nist.gov/vuln/detail/CVE-2026-119379 https://sqlite.org/bugs/info/2026-08-16T10:15:25Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/3f57024aecea0f3b https://www.cve.org/CVERecord?id=CVE-2026-119379 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind
libswresample5	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libswresample5	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libswresample5	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libswresample5	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libswresample5	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libswresample5	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libswresample5	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libswresample5	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libswresample5	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libswresample5	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libswresample5	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libswresample5	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libswresample5	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libswresample5	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libswresample5	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libswresample5	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libswresample5	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libswscale8	CVE-2026-58049	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta
libswscale8	CVE-2026-64830	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer
libswscale8	CVE-2026-64832	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c
libswscale8	CVE-2026-64833	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c
libswscale8	CVE-2026-64834	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer
libswscale8	CVE-2026-64835	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder
libswscale8	CVE-2026-66036	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter
libswscale8	CVE-2026-66039	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file
libswscale8	CVE-2026-66040	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder
libswscale8	CVE-2026-66041	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter
libswscale8	CVE-2026-70628	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file
libswscale8	CVE-2026-70632	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing
libswscale8	CVE-2026-75141	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing
libswscale8	CVE-2026-75142	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c
libswscale8	CVE-2026-75143	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader
libswscale8	CVE-2026-75144	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer
libswscale8	CVE-2026-75146	HIGH	7:7.1.5-0+deb13u1		https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c
libsystemd0	CVE-2026-16742	HIGH	257.13-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742
libtiff6	CVE-2026-36849	HIGH	4.7.0-3+deb13u3
libtiff6	CVE-2026-52490	HIGH	4.7.0-3+deb13u3		https://access.redhat.com/errata/RHSA-2026:69095 https://access.redhat.com/security/cve/CVE-2026-52490 https://bugzilla.redhat.com/2523148 https://bugzilla.redhat.com/show_bug.cgi?id=2523148 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490 https://errata.almalinux.org/8/ALSA-2026-69095.html https://errata.rockylinux.org/RLSA-2026:69095 https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671 https://gitlab.com/libtiff/libtiff/-/work_items/846 https://linux.oracle.com/cve/CVE-2026-52490.html https://linux.oracle.com/errata/ELSA-2026-69095.html https://nvd.nist.gov/vuln/detail/CVE-2026-52490 https://www.cve.org/CVERecord?id=CVE-2026-52490
libtinfo6	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
libudev1	CVE-2026-16742	HIGH	257.13-1~deb13u1		https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742
libuuid1	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
libuuid1	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
libuuid1	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
libuuid1	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
libx11-6	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libx11-data	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libx11-xcb1	CVE-2026-88806	HIGH	2:1.8.12-1		https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806
libxi6	CVE-2026-109089	HIGH	2:1.8.2-1		https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109089 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0 https://linux.oracle.com/cve/CVE-2026-109089.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109089 https://www.cve.org/CVERecord?id=CVE-2026-109089
libxi6	CVE-2026-109090	HIGH	2:1.8.2-1		https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109090 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6 https://linux.oracle.com/cve/CVE-2026-109090.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109090 https://www.cve.org/CVERecord?id=CVE-2026-109090
libxml2	CVE-2026-6653	CRITICAL	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:61247 https://access.redhat.com/security/cve/CVE-2026-6653 https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260 https://bugzilla.redhat.com/2491354 https://bugzilla.redhat.com/2494191 https://bugzilla.redhat.com/show_bug.cgi?id=2491354 https://bugzilla.redhat.com/show_bug.cgi?id=2494191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11979 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6653 https://errata.almalinux.org/9/ALSA-2026-61247.html https://errata.rockylinux.org/RLSA-2026:61247 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058 https://linux.oracle.com/cve/CVE-2026-6653.html https://linux.oracle.com/errata/ELSA-2026-69655.html https://nvd.nist.gov/vuln/detail/CVE-2026-6653 https://ubuntu.com/security/notices/USN-8456-1 https://www.cve.org/CVERecord?id=CVE-2026-6653
libxml2	CVE-2026-74860	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:64463 https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/errata/RHSA-2026:71586 https://access.redhat.com/errata/RHSA-2026:71641 https://access.redhat.com/errata/RHSA-2026:72470 https://access.redhat.com/errata/RHSA-2026:72475 https://access.redhat.com/errata/RHSA-2026:72476 https://access.redhat.com/errata/RHSA-2026:79357 https://access.redhat.com/errata/RHSA-2026:82939 https://access.redhat.com/errata/RHSA-2026:89750 https://access.redhat.com/errata/RHSA-2026:89759 https://access.redhat.com/errata/RHSA-2026:90309 https://access.redhat.com/errata/RHSA-2026:91202 https://access.redhat.com/errata/RHSA-2026:91204 https://access.redhat.com/errata/RHSA-2026:91206 https://access.redhat.com/errata/RHSA-2026:91207 https://access.redhat.com/errata/RHSA-2026:91217 https://access.redhat.com/errata/RHSA-2026:91218 https://access.redhat.com/errata/RHSA-2026:91219 https://access.redhat.com/errata/RHSA-2026:91224 https://access.redhat.com/errata/RHSA-2026:91232 https://access.redhat.com/errata/RHSA-2026:91233 https://access.redhat.com/errata/RHSA-2026:91234 https://access.redhat.com/errata/RHSA-2026:91235 https://access.redhat.com/errata/RHSA-2026:91236 https://access.redhat.com/errata/RHSA-2026:91237 https://access.redhat.com/errata/RHSA-2026:91238 https://access.redhat.com/errata/RHSA-2026:91241 https://access.redhat.com/errata/RHSA-2026:91242 https://access.redhat.com/errata/RHSA-2026:91243 https://access.redhat.com/errata/RHSA-2026:91244 https://access.redhat.com/errata/RHSA-2026:91245 https://access.redhat.com/errata/RHSA-2026:91246 https://access.redhat.com/errata/RHSA-2026:91248 https://access.redhat.com/errata/RHSA-2026:91249 https://access.redhat.com/errata/RHSA-2026:92352 https://access.redhat.com/errata/RHSA-2026:92589 https://access.redhat.com/errata/RHSA-2026:93463 https://access.redhat.com/errata/RHSA-2026:93473 https://access.redhat.com/errata/RHSA-2026:93791 https://access.redhat.com/errata/RHSA-2026:94459 https://access.redhat.com/errata/RHSA-2026:94468 https://access.redhat.com/errata/RHSA-2026:94474 https://access.redhat.com/errata/RHSA-2026:94476 https://access.redhat.com/security/cve/CVE-2026-74860 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://linux.oracle.com/cve/CVE-2026-74860.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-74860 https://ubuntu.com/security/notices/USN-8787-1 https://www.cve.org/CVERecord?id=CVE-2026-74860
libxml2	CVE-2026-86138	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86138 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86138.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86138 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86138
libxml2	CVE-2026-86139	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/security/cve/CVE-2026-86139 https://github.com/GNOME/libxml2/commit/8edbbdb09f24d26a2f900141fddc2b9d014f53b0 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://nvd.nist.gov/vuln/detail/CVE-2026-86139 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86139
libxml2	CVE-2026-86140	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86140 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86140.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86140 https://ubuntu.com/security/notices/USN-8787-1 https://www.cve.org/CVERecord?id=CVE-2026-86140
libxml2	CVE-2026-86142	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86142 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113 https://linux.oracle.com/cve/CVE-2026-86142.html https://linux.oracle.com/errata/ELSA-2026-80675.html https://nvd.nist.gov/vuln/detail/CVE-2026-86142 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86142
libxml2	CVE-2026-86143	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86143 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111 https://linux.oracle.com/cve/CVE-2026-86143.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86143 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86143
libxml2	CVE-2026-86144	HIGH	2.12.7+dfsg+really2.9.14-2.1+deb13u3		https://access.redhat.com/errata/RHSA-2026:71585 https://access.redhat.com/security/cve/CVE-2026-86144 https://bugzilla.redhat.com/2528986 https://bugzilla.redhat.com/2528987 https://bugzilla.redhat.com/2528989 https://bugzilla.redhat.com/2528990 https://bugzilla.redhat.com/2528992 https://bugzilla.redhat.com/2529697 https://bugzilla.redhat.com/show_bug.cgi?id=2528986 https://bugzilla.redhat.com/show_bug.cgi?id=2528987 https://bugzilla.redhat.com/show_bug.cgi?id=2528989 https://bugzilla.redhat.com/show_bug.cgi?id=2528990 https://bugzilla.redhat.com/show_bug.cgi?id=2528992 https://bugzilla.redhat.com/show_bug.cgi?id=2529697 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144 https://errata.almalinux.org/9/ALSA-2026-71585.html https://errata.rockylinux.org/RLSA-2026:71585 https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61 https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4 https://linux.oracle.com/cve/CVE-2026-86144.html https://linux.oracle.com/errata/ELSA-2026-71641.html https://nvd.nist.gov/vuln/detail/CVE-2026-86144 https://ubuntu.com/security/notices/USN-8910-1 https://www.cve.org/CVERecord?id=CVE-2026-86144
libxrender1	CVE-2026-88807	HIGH	1:0.9.12-1		https://access.redhat.com/errata/RHSA-2026:91057 https://access.redhat.com/security/cve/CVE-2026-88807 https://bugzilla.redhat.com/2537924 https://bugzilla.redhat.com/show_bug.cgi?id=2537924 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88807 https://errata.almalinux.org/9/ALSA-2026-91057.html https://errata.rockylinux.org/RLSA-2026:91057 https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19 https://linux.oracle.com/cve/CVE-2026-88807.html https://linux.oracle.com/errata/ELSA-2026-91267.html https://nvd.nist.gov/vuln/detail/CVE-2026-88807 https://www.cve.org/CVERecord?id=CVE-2026-88807
login	CVE-2026-76642	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
login	CVE-2026-78408	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
login	CVE-2026-78409	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
login	CVE-2026-78410	HIGH	1:4.16.0-2+really2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
mount	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
mount	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
mount	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
mount	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
ncurses-base	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
ncurses-bin	CVE-2025-69720	HIGH	6.5+20250216-2		https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720
perl-base	CVE-2026-9538	HIGH	5.40.1-6+deb13u1		http://www.openwall.com/lists/oss-security/2026/05/26/4 https://access.redhat.com/errata/RHSA-2026:49525 https://access.redhat.com/security/cve/CVE-2026-9538 https://bugzilla.redhat.com/2481315 https://bugzilla.redhat.com/show_bug.cgi?id=2481315 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538 https://errata.almalinux.org/9/ALSA-2026-49525.html https://errata.rockylinux.org/RLSA-2026:49525 https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch https://linux.oracle.com/cve/CVE-2026-9538.html https://linux.oracle.com/errata/ELSA-2026-49525.html https://lists.security.metacpan.org/cve-announce/msg/40396448/ https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes https://nvd.nist.gov/vuln/detail/CVE-2026-9538 https://ubuntu.com/security/notices/USN-8684-1 https://www.cve.org/CVERecord?id=CVE-2026-9538
util-linux	CVE-2026-76642	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/security/cve/CVE-2026-76642 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476 https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892 https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f https://linux.oracle.com/cve/CVE-2026-76642.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-76642 https://www.cve.org/CVERecord?id=CVE-2026-76642 https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper
util-linux	CVE-2026-78408	HIGH	2.41.5-0+deb13u1		http://www.openwall.com/lists/oss-security/2026/09/05/2 https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78408 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj https://linux.oracle.com/cve/CVE-2026-78408.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78408 https://www.cve.org/CVERecord?id=CVE-2026-78408
util-linux	CVE-2026-78409	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409
util-linux	CVE-2026-78410	HIGH	2.41.5-0+deb13u1		https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/errata/RHSA-2026:93461 https://access.redhat.com/errata/RHSA-2026:95365 https://access.redhat.com/security/cve/CVE-2026-78410 https://bugzilla.redhat.com/2454956 https://bugzilla.redhat.com/2494101 https://bugzilla.redhat.com/2519646 https://bugzilla.redhat.com/2519647 https://bugzilla.redhat.com/2519648 https://bugzilla.redhat.com/2521999 https://bugzilla.redhat.com/2522497 https://bugzilla.redhat.com/2522684 https://bugzilla.redhat.com/2552551 https://bugzilla.redhat.com/show_bug.cgi?id=2454956 https://bugzilla.redhat.com/show_bug.cgi?id=2494101 https://bugzilla.redhat.com/show_bug.cgi?id=2519646 https://bugzilla.redhat.com/show_bug.cgi?id=2519647 https://bugzilla.redhat.com/show_bug.cgi?id=2519648 https://bugzilla.redhat.com/show_bug.cgi?id=2521999 https://bugzilla.redhat.com/show_bug.cgi?id=2522497 https://bugzilla.redhat.com/show_bug.cgi?id=2522684 https://bugzilla.redhat.com/show_bug.cgi?id=2552551 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410 https://errata.almalinux.org/10/ALSA-2026-93461.html https://errata.rockylinux.org/RLSA-2026:93461 https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m https://linux.oracle.com/cve/CVE-2026-78410.html https://linux.oracle.com/errata/ELSA-2026-93461.html https://nvd.nist.gov/vuln/detail/CVE-2026-78410 https://www.cve.org/CVERecord?id=CVE-2026-78410
wget	CVE-2026-58471	HIGH	1.25.0-2		https://access.redhat.com/errata/RHSA-2026:62143 https://access.redhat.com/security/cve/CVE-2026-58471 https://bugzilla.redhat.com/2497850 https://bugzilla.redhat.com/2497857 https://bugzilla.redhat.com/show_bug.cgi?id=2497850 https://bugzilla.redhat.com/show_bug.cgi?id=2497857 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58471 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58472 https://errata.almalinux.org/9/ALSA-2026-62143.html https://errata.rockylinux.org/RLSA-2026:62143 https://github.com/advisories/GHSA-vv88-699v-w5rh https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee https://linux.oracle.com/cve/CVE-2026-58471.html https://linux.oracle.com/errata/ELSA-2026-62144-0.html https://nvd.nist.gov/vuln/detail/CVE-2026-58471 https://ubuntu.com/security/notices/USN-8543-1 https://www.cve.org/CVERecord?id=CVE-2026-58471 https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c
wget	CVE-2026-58472	HIGH	1.25.0-2		https://access.redhat.com/errata/RHSA-2026:62143 https://access.redhat.com/security/cve/CVE-2026-58472 https://bugzilla.redhat.com/2497850 https://bugzilla.redhat.com/2497857 https://bugzilla.redhat.com/show_bug.cgi?id=2497850 https://bugzilla.redhat.com/show_bug.cgi?id=2497857 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58471 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58472 https://errata.almalinux.org/9/ALSA-2026-62143.html https://errata.rockylinux.org/RLSA-2026:62143 https://github.com/advisories/GHSA-332r-8pmf-8m9p https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812 https://linux.oracle.com/cve/CVE-2026-58472.html https://linux.oracle.com/errata/ELSA-2026-62144-0.html https://nvd.nist.gov/vuln/detail/CVE-2026-58472 https://ubuntu.com/security/notices/USN-8543-1 https://www.cve.org/CVERecord?id=CVE-2026-58472 https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding
zlib1g	CVE-2026-76844	HIGH	1:1.3.dfsg+really1.3.1-1+b1	1:1.3.dfsg+really1.3.1-1+deb13u1	https://access.redhat.com/security/cve/CVE-2026-76844 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/advisories/GHSA-wr3j-pwj9-hqq6 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148 https://github.com/webpack/webpack-dev-middleware https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b https://github.com/webpack/webpack-dev-middleware/pull/2404 https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6 https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0 https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c https://nvd.nist.gov/vuln/detail/CVE-2026-76844 https://www.cve.org/CVERecord?id=CVE-2026-76844 https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
zlib1g	CVE-2026-85091	HIGH	1:1.3.dfsg+really1.3.1-1+b1	1:1.3.dfsg+really1.3.1-1+deb13u1	https://access.redhat.com/security/cve/CVE-2026-85091 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://nvd.nist.gov/vuln/detail/CVE-2026-85091 https://ubuntu.com/security/notices/USN-8954-1 https://www.cve.org/CVERecord?id=CVE-2026-85091 https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
No Misconfigurations found
python-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
jaraco.context	CVE-2026-23949	HIGH	5.3.0	6.1.0	https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949
starlette	CVE-2025-62727	HIGH	0.46.2	0.49.1	https://access.redhat.com/security/cve/CVE-2025-62727 https://advisory.echohq.com/cve/CVE-2025-62727 https://github.com/Kludex/starlette https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5 https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c https://github.com/Kludex/starlette/releases/tag/0.49.1 https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8 https://nvd.nist.gov/vuln/detail/CVE-2025-62727 https://www.cve.org/CVERecord?id=CVE-2025-62727
starlette	CVE-2026-48818	HIGH	0.46.2	1.1.0	https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/security/cve/CVE-2026-48818 https://advisory.echohq.com/cve/CVE-2026-48818 https://bugzilla.redhat.com/show_bug.cgi?id=2490020 https://github.com/Kludex/starlette https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5 https://github.com/Kludex/starlette/pull/3287 https://github.com/Kludex/starlette/releases/tag/1.1.0 https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-2281.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-48818 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json https://www.cve.org/CVERecord?id=CVE-2026-48818
starlette	CVE-2026-54283	HIGH	0.46.2	1.3.1	https://access.redhat.com/security/cve/CVE-2026-54283 https://advisory.echohq.com/cve/CVE-2026-54283 https://github.com/Kludex/starlette https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq https://nvd.nist.gov/vuln/detail/CVE-2026-54283 https://www.cve.org/CVERecord?id=CVE-2026-54283
wheel	CVE-2026-24049	HIGH	0.45.1	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
No Misconfigurations found

apt

CVE-2026-109518

HIGH

3.0.3

3.0.4

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

bsdutils

CVE-2026-76642

HIGH

1:2.41.5-0+deb13u1

bsdutils

CVE-2026-78408

HIGH

1:2.41.5-0+deb13u1

bsdutils

CVE-2026-78409

HIGH

1:2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

bsdutils

CVE-2026-78410

HIGH

1:2.41.5-0+deb13u1

ffmpeg

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

ffmpeg

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

ffmpeg

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

ffmpeg

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

ffmpeg

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

ffmpeg

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

ffmpeg

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

ffmpeg

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

ffmpeg

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

ffmpeg

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

ffmpeg

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

ffmpeg

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

ffmpeg

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

ffmpeg

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

ffmpeg

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

ffmpeg

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

ffmpeg

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libacl1

CVE-2026-54369

HIGH

2.3.2-2+b1

libapt-pkg7.0

CVE-2026-109518

HIGH

3.0.3

3.0.4

http://www.openwall.com/lists/oss-security/2026/11/04/12 https://access.redhat.com/security/cve/CVE-2026-109518 https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html https://lists.debian.org/debian-security-announce/2026/msg00526.html https://nvd.nist.gov/vuln/detail/CVE-2026-109518 https://ubuntu.com/blog/apt-vulnerability-fixes-available https://ubuntu.com/security/notices/USN-8996-1 https://www.cve.org/CVERecord?id=CVE-2026-109518

libavcodec61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavcodec61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavcodec61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavcodec61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavcodec61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavcodec61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavcodec61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavcodec61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavcodec61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavcodec61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavcodec61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavcodec61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavcodec61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavcodec61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavcodec61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavcodec61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavcodec61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavdevice61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavdevice61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavdevice61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavdevice61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavdevice61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavdevice61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavdevice61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavdevice61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavdevice61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavdevice61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavdevice61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavdevice61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavdevice61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavdevice61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavdevice61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavdevice61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavdevice61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavfilter10

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavfilter10

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavfilter10

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavfilter10

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavfilter10

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavfilter10

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavfilter10

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavfilter10

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavfilter10

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavfilter10

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavfilter10

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavfilter10

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavfilter10

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavfilter10

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavfilter10

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavfilter10

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavfilter10

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavformat61

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavformat61

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavformat61

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavformat61

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavformat61

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavformat61

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavformat61

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavformat61

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavformat61

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavformat61

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavformat61

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavformat61

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavformat61

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavformat61

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavformat61

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavformat61

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavformat61

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libavutil59

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libavutil59

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libavutil59

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libavutil59

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libavutil59

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libavutil59

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libavutil59

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libavutil59

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libavutil59

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libavutil59

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libavutil59

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libavutil59

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libavutil59

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libavutil59

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libavutil59

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libavutil59

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libavutil59

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libblkid1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libblkid1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libblkid1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libblkid1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libcjson1

CVE-2026-16554

HIGH

1.7.18-3.1+deb13u1

http://www.openwall.com/lists/oss-security/2026/07/30/26 http://www.openwall.com/lists/oss-security/2026/07/31/4 https://access.redhat.com/security/cve/CVE-2026-16554 https://cert.pl/en/posts/2026/07/CVE-2026-16554 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-16554 https://www.cve.org/CVERecord?id=CVE-2026-16554

libcjson1

CVE-2026-29036

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-29036 https://github.com/DaveGamble/cJSON https://nvd.nist.gov/vuln/detail/CVE-2026-29036 https://www.cve.org/CVERecord?id=CVE-2026-29036 https://www.vulncheck.com/advisories/cjson-wrong-key-modification-via-json-pointer-escape-decoding

libcjson1

CVE-2026-67215

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-67215 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67215 https://www.cve.org/CVERecord?id=CVE-2026-67215 https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion

libcjson1

CVE-2026-67216

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-67216 https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180 https://joshua.hu/cjson-json-parser-cve-vulnerabilities https://nvd.nist.gov/vuln/detail/CVE-2026-67216 https://www.cve.org/CVERecord?id=CVE-2026-67216 https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service

libcjson1

CVE-2026-87933

HIGH

1.7.18-3.1+deb13u1

https://access.redhat.com/security/cve/CVE-2026-87933 https://github.com/DaveGamble/cJSON/ https://github.com/DaveGamble/cJSON/issues/1060 https://github.com/DaveGamble/cJSON/pull/1065 https://nvd.nist.gov/vuln/detail/CVE-2026-87933 https://vuldb.com/cve/CVE-2026-87933 https://vuldb.com/submit/911136 https://vuldb.com/vuln/401815 https://vuldb.com/vuln/401815/cti https://www.cve.org/CVERecord?id=CVE-2026-87933

libexpat1

CVE-2026-113351

HIGH

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-113351 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 https://github.com/libexpat/libexpat/pull/1431 https://nvd.nist.gov/vuln/detail/CVE-2026-113351 https://www.cve.org/CVERecord?id=CVE-2026-113351 https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset

libexpat1

CVE-2026-115506

HIGH

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-115506 https://github.com/hannob/lololol https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/issues/1160 https://github.com/libexpat/libexpat/pull/1433 https://nvd.nist.gov/vuln/detail/CVE-2026-115506 https://www.cve.org/CVERecord?id=CVE-2026-115506 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay

libexpat1

CVE-2026-117610

HIGH

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-117610 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510 https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d https://github.com/libexpat/libexpat/pull/1444 https://nvd.nist.gov/vuln/detail/CVE-2026-117610 https://www.cve.org/CVERecord?id=CVE-2026-117610 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser

libexpat1

CVE-2026-118370

HIGH

2.9.0-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-118370 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140 https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c https://github.com/libexpat/libexpat/pull/1450 https://nvd.nist.gov/vuln/detail/CVE-2026-118370 https://www.cve.org/CVERecord?id=CVE-2026-118370 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes

liblastlog2-2

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

liblastlog2-2

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

liblastlog2-2

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

liblastlog2-2

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libmount1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libmount1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libncursesw6

CVE-2025-69720

HIGH

6.5+20250216-2

https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720

libpostproc58

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libpostproc58

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libpostproc58

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libpostproc58

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libpostproc58

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libpostproc58

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libpostproc58

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libpostproc58

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libpostproc58

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libpostproc58

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libpostproc58

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libpostproc58

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libpostproc58

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libpostproc58

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libpostproc58

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libpostproc58

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libpostproc58

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libsmartcols1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libsmartcols1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libsmartcols1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libsmartcols1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libsndfile1

CVE-2026-37555

HIGH

1.2.2-2+deb13u1

https://access.redhat.com/errata/RHSA-2026:19559 https://access.redhat.com/errata/RHSA-2026:19560 https://access.redhat.com/errata/RHSA-2026:19610 https://access.redhat.com/errata/RHSA-2026:23221 https://access.redhat.com/errata/RHSA-2026:23222 https://access.redhat.com/errata/RHSA-2026:23223 https://access.redhat.com/errata/RHSA-2026:25092 https://access.redhat.com/errata/RHSA-2026:25197 https://access.redhat.com/errata/RHSA-2026:25198 https://access.redhat.com/errata/RHSA-2026:25227 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/security/cve/CVE-2026-37555 https://bugzilla.redhat.com/2463856 https://bugzilla.redhat.com/show_bug.cgi?id=2463856 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-37555 https://errata.almalinux.org/9/ALSA-2026-19610.html https://errata.rockylinux.org/RLSA-2026:19610 https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 https://github.com/libsndfile/libsndfile/issues/833 https://linux.oracle.com/cve/CVE-2026-37555.html https://linux.oracle.com/errata/ELSA-2026-19610.html https://nvd.nist.gov/vuln/detail/CVE-2026-37555 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json https://www.cve.org/CVERecord?id=CVE-2026-37555 https://www.openwall.com/lists/oss-security/2026/04/30/7

libsqlite3-0

CVE-2026-119373

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge https://access.redhat.com/security/cve/CVE-2026-119373 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107 https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80 https://nvd.nist.gov/vuln/detail/CVE-2026-119373 https://sqlite.org/bugs/info/2026-08-04T08:49:27Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/a7f8c92f62 https://www.cve.org/CVERecord?id=CVE-2026-119373 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists

libsqlite3-0

CVE-2026-119374

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-fts5-securedel https://access.redhat.com/security/cve/CVE-2026-119374 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525 https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9 https://nvd.nist.gov/vuln/detail/CVE-2026-119374 https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/9cd4f9e920 https://www.cve.org/CVERecord?id=CVE-2026-119374 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete

libsqlite3-0

CVE-2026-119379

HIGH

3.46.1-7+deb13u2

https://abraxaslabs.tech/research/sqlite-session-ncol https://access.redhat.com/security/cve/CVE-2026-119379 https://github.com/sqlite/sqlite https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619 https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52 https://nvd.nist.gov/vuln/detail/CVE-2026-119379 https://sqlite.org/bugs/info/2026-08-16T10:15:25Z https://sqlite.org/releaselog/3_54_0.html https://sqlite.org/src/info/3f57024aecea0f3b https://www.cve.org/CVERecord?id=CVE-2026-119379 https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind

libswresample5

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libswresample5

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libswresample5

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libswresample5

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libswresample5

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libswresample5

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libswresample5

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libswresample5

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libswresample5

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libswresample5

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libswresample5

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libswresample5

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libswresample5

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libswresample5

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libswresample5

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libswresample5

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libswresample5

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libswscale8

CVE-2026-58049

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:43711 https://access.redhat.com/errata/RHSA-2026:51180 https://access.redhat.com/errata/RHSA-2026:52832 https://access.redhat.com/errata/RHSA-2026:52833 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/security/cve/CVE-2026-58049 https://bugzilla.redhat.com/show_bug.cgi?id=2493952 https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c https://github.com/advisories/GHSA-mjxr-6gqf-w78h https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc https://nvd.nist.gov/vuln/detail/CVE-2026-58049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json https://ubuntu.com/security/notices/USN-8750-1 https://www.cve.org/CVERecord?id=CVE-2026-58049 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta

libswscale8

CVE-2026-64830

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64830 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657 https://github.com/advisories/GHSA-jphx-q7f7-4x8r https://nvd.nist.gov/vuln/detail/CVE-2026-64830 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64830 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer

libswscale8

CVE-2026-64832

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64832 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664 https://github.com/advisories/GHSA-jc8j-9799-c943 https://nvd.nist.gov/vuln/detail/CVE-2026-64832 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64832 https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c

libswscale8

CVE-2026-64833

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64833 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661 https://github.com/advisories/GHSA-34g6-m4cp-w5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-64833 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64833 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c

libswscale8

CVE-2026-64834

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64834 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663 https://github.com/advisories/GHSA-5xcx-3qx2-qv4x https://nvd.nist.gov/vuln/detail/CVE-2026-64834 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64834 https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer

libswscale8

CVE-2026-64835

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-64835 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659 https://github.com/advisories/GHSA-p2v8-4c4f-rwpq https://nvd.nist.gov/vuln/detail/CVE-2026-64835 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-64835 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder

libswscale8

CVE-2026-66036

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66036 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783 https://github.com/advisories/GHSA-575m-jfmw-q76c https://nvd.nist.gov/vuln/detail/CVE-2026-66036 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66036 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter

libswscale8

CVE-2026-66039

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66039 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631 https://github.com/advisories/GHSA-84qc-6h9r-4w33 https://nvd.nist.gov/vuln/detail/CVE-2026-66039 https://ubuntu.com/security/notices/USN-8671-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-66039 https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file

libswscale8

CVE-2026-66040

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66040 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786 https://github.com/advisories/GHSA-6vcg-882j-82v5 https://nvd.nist.gov/vuln/detail/CVE-2026-66040 https://www.cve.org/CVERecord?id=CVE-2026-66040 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder

libswscale8

CVE-2026-66041

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-66041 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625 https://github.com/advisories/GHSA-frhp-m687-9g3q https://nvd.nist.gov/vuln/detail/CVE-2026-66041 https://www.cve.org/CVERecord?id=CVE-2026-66041 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter

libswscale8

CVE-2026-70628

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70628 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897 https://github.com/advisories/GHSA-qw9h-2hhv-hpfr https://nvd.nist.gov/vuln/detail/CVE-2026-70628 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70628 https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file

libswscale8

CVE-2026-70632

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-70632 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898 https://github.com/advisories/GHSA-q24x-99v6-6hxc https://nvd.nist.gov/vuln/detail/CVE-2026-70632 https://ubuntu.com/security/notices/USN-8680-1 https://ubuntu.com/security/notices/USN-8738-1 https://www.cve.org/CVERecord?id=CVE-2026-70632 https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing

libswscale8

CVE-2026-75141

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75141 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088 https://nvd.nist.gov/vuln/detail/CVE-2026-75141 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75141 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing

libswscale8

CVE-2026-75142

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75142 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087 https://nvd.nist.gov/vuln/detail/CVE-2026-75142 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75142 https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c

libswscale8

CVE-2026-75143

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75143 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089 https://nvd.nist.gov/vuln/detail/CVE-2026-75143 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75143 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader

libswscale8

CVE-2026-75144

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75144 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091 https://nvd.nist.gov/vuln/detail/CVE-2026-75144 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75144 https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer

libswscale8

CVE-2026-75146

HIGH

7:7.1.5-0+deb13u1

https://access.redhat.com/security/cve/CVE-2026-75146 https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093 https://nvd.nist.gov/vuln/detail/CVE-2026-75146 https://ubuntu.com/security/notices/USN-8716-1 https://ubuntu.com/security/notices/USN-8716-2 https://www.cve.org/CVERecord?id=CVE-2026-75146 https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c

libsystemd0

CVE-2026-16742

HIGH

257.13-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742

libtiff6

CVE-2026-36849

HIGH

4.7.0-3+deb13u3

libtiff6

CVE-2026-52490

HIGH

4.7.0-3+deb13u3

https://access.redhat.com/errata/RHSA-2026:69095 https://access.redhat.com/security/cve/CVE-2026-52490 https://bugzilla.redhat.com/2523148 https://bugzilla.redhat.com/show_bug.cgi?id=2523148 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490 https://errata.almalinux.org/8/ALSA-2026-69095.html https://errata.rockylinux.org/RLSA-2026:69095 https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671 https://gitlab.com/libtiff/libtiff/-/work_items/846 https://linux.oracle.com/cve/CVE-2026-52490.html https://linux.oracle.com/errata/ELSA-2026-69095.html https://nvd.nist.gov/vuln/detail/CVE-2026-52490 https://www.cve.org/CVERecord?id=CVE-2026-52490

libtinfo6

CVE-2025-69720

HIGH

6.5+20250216-2

https://access.redhat.com/errata/RHSA-2026:5913 https://access.redhat.com/security/cve/CVE-2025-69720 https://bugzilla.redhat.com/2449037 https://bugzilla.redhat.com/show_bug.cgi?id=2449037 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720 https://errata.almalinux.org/10/ALSA-2026-5913.html https://errata.rockylinux.org/RLSA-2026:5913 https://github.com/Cao-Wuhui/CVE-2025-69720 https://github.com/advisories/GHSA-9952-mrqj-h4jh https://invisible-island.net/archives/ncurses/6.5 https://invisible-island.net/archives/ncurses/6.5/ https://invisible-island.net/ncurses https://invisible-island.net/ncurses/ https://linux.oracle.com/cve/CVE-2025-69720.html https://linux.oracle.com/errata/ELSA-2026-5913.html https://marc.info/?l=ncurses-bug&m=176539968328570&w=2 https://marc.info/?l=ncurses-bug&m=176540731801330&w=2 https://marc.info/?l=ncurses-bug&m=176545557728083&w=2 https://nvd.nist.gov/vuln/detail/CVE-2025-69720 https://ubuntu.com/security/notices/USN-8503-1 https://www.cve.org/CVERecord?id=CVE-2025-69720

libudev1

CVE-2026-16742

HIGH

257.13-1~deb13u1

https://access.redhat.com/security/cve/CVE-2026-16742 https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv https://nvd.nist.gov/vuln/detail/CVE-2026-16742 https://ubuntu.com/security/notices/USN-8626-1 https://www.cve.org/CVERecord?id=CVE-2026-16742

libuuid1

CVE-2026-76642

HIGH

2.41.5-0+deb13u1

libuuid1

CVE-2026-78408

HIGH

2.41.5-0+deb13u1

libuuid1

CVE-2026-78409

HIGH

2.41.5-0+deb13u1

https://access.redhat.com/errata/RHSA-2026:63162 https://access.redhat.com/security/cve/CVE-2026-78409 https://bugzilla.redhat.com/show_bug.cgi?id=2522607 https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv https://nvd.nist.gov/vuln/detail/CVE-2026-78409 https://www.cve.org/CVERecord?id=CVE-2026-78409

libuuid1

CVE-2026-78410

HIGH

2.41.5-0+deb13u1

libx11-6

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libx11-data

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libx11-xcb1

CVE-2026-88806

HIGH

2:1.8.12-1

https://access.redhat.com/errata/RHSA-2026:91365 https://access.redhat.com/security/cve/CVE-2026-88806 https://bugzilla.redhat.com/2538514 https://bugzilla.redhat.com/show_bug.cgi?id=2538514 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806 https://errata.almalinux.org/9/ALSA-2026-91365.html https://errata.rockylinux.org/RLSA-2026:91365 https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309 https://linux.oracle.com/cve/CVE-2026-88806.html https://linux.oracle.com/errata/ELSA-2026-91366.html https://nvd.nist.gov/vuln/detail/CVE-2026-88806 https://ubuntu.com/security/notices/USN-8913-1 https://www.cve.org/CVERecord?id=CVE-2026-88806

libxi6

CVE-2026-109089

HIGH

2:1.8.2-1

https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109089 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0 https://linux.oracle.com/cve/CVE-2026-109089.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109089 https://www.cve.org/CVERecord?id=CVE-2026-109089

libxi6

CVE-2026-109090

HIGH

2:1.8.2-1

https://access.redhat.com/errata/RHSA-2026:93439 https://access.redhat.com/security/cve/CVE-2026-109090 https://bugzilla.redhat.com/show_bug.cgi?id=2562069 https://bugzilla.redhat.com/show_bug.cgi?id=2562191 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090 https://errata.almalinux.org/9/ALSA-2026-93439.html https://errata.rockylinux.org/RLSA-2026:93439 https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6 https://linux.oracle.com/cve/CVE-2026-109090.html https://linux.oracle.com/errata/ELSA-2026-93441.html https://nvd.nist.gov/vuln/detail/CVE-2026-109090 https://www.cve.org/CVERecord?id=CVE-2026-109090

libxml2

CVE-2026-74860

HIGH