https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:24:02.593392+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-65703 CVE-2026-65703 — FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder 2026-09-30T23:24:02.925580+00:00

Affected: FFmpeg

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution.

 https://vulnerability.circl.lu/vuln/ghsa-x3xw-4qcq-c6mr GHSA-x3xw-4qcq-c6mr 2026-09-30T23:24:02.925699+00:00

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution.