{"grype_matches":[{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119586","versionConstraint":"<= 3.54.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119586","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-07","epss":0.01545,"percentile":0.75137}],"risk":1.2089625,"urls":["https://abraxaslabs.tech/research/sqlite-cli-recover","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.54.1/ext/recover/sqlite3recover.c#L1221-L1223","https://github.com/sqlite/sqlite/blob/version-3.54.1/src/shell.c.in#L7877-L7891","https://www.vulncheck.com/advisories/sqlite-cli-through-3.54.1-command-injection-via-recover-output"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119586","description":"SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3."},"relatedVulnerabilities":[]},{"artifact":{"id":"9ca1f444c8c5d2fd","cpes":["cpe:2.3:a:bluez:bluez:5.86-r2:*:*:*:*:*:*:*"],"name":"bluez","purl":"pkg:apk/alpine/bluez@5.86-r2?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"5.86-r2","language":"","licenses":["GPL-2.0-or-later AND BSD-2-Clause AND MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/bluetooth"},{"path":"/etc/bluetooth/input.conf"},{"path":"/etc/bluetooth/main.conf"},{"path":"/etc/bluetooth/mesh-main.conf"},{"path":"/etc/bluetooth/network.conf"},{"path":"/etc/xdg"},{"path":"/etc/xdg/autostart"},{"path":"/etc/xdg/autostart/mpris-proxy.desktop"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/bluemoon"},{"path":"/usr/bin/bluetoothctl"},{"path":"/usr/bin/bluez-simple-agent"},{"path":"/usr/bin/btattach"},{"path":"/usr/bin/hex2hcd"},{"path":"/usr/bin/isotest"},{"path":"/usr/bin/l2ping"},{"path":"/usr/bin/l2test"},{"path":"/usr/bin/mesh-cfgclient"},{"path":"/usr/bin/mesh-cfgtest"},{"path":"/usr/bin/mpris-proxy"},{"path":"/usr/bin/rctest"},{"path":"/usr/lib"},{"path":"/usr/lib/bluetooth"},{"path":"/usr/lib/bluetooth/bluetooth-meshd"},{"path":"/usr/lib/bluetooth/bluetoothd"},{"path":"/usr/lib/modules-load.d"},{"path":"/usr/lib/modules-load.d/bluez.conf"},{"path":"/usr/share"},{"path":"/usr/share/dbus-1"},{"path":"/usr/share/dbus-1/system-services"},{"path":"/usr/share/dbus-1/system-services/org.bluez.mesh.service"},{"path":"/usr/share/dbus-1/system-services/org.bluez.service"},{"path":"/usr/share/dbus-1/system.d"},{"path":"/usr/share/dbus-1/system.d/bluetooth-mesh.conf"},{"path":"/usr/share/dbus-1/system.d/bluetooth.conf"},{"path":"/usr/share/dbus-1/system.d/obex.conf"},{"path":"/var"},{"path":"/var/lib"},{"path":"/var/lib/bluetooth"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bluez"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2020-24490","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:bluez:bluez:5.86:*:*:*:*:*:*:*"],"package":{"name":"bluez","version":"5.86-r2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2020-24490","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":3.3,"impactScore":2.9,"exploitabilityScore":6.5},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-24490","date":"2026-11-07","epss":0.02241,"percentile":0.8295}],"risk":1.109295,"urls":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24490","description":"Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ."},"relatedVulnerabilities":[]},{"artifact":{"id":"b8b7dd23f0728c66","cpes":["cpe:2.3:a:bluez-deprecated:bluez-deprecated:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez-deprecated:bluez_deprecated:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez_deprecated:bluez-deprecated:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez_deprecated:bluez_deprecated:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez:bluez-deprecated:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez:bluez_deprecated:5.86-r2:*:*:*:*:*:*:*"],"name":"bluez-deprecated","purl":"pkg:apk/alpine/bluez-deprecated@5.86-r2?arch=x86_64&distro=alpine-3.24.2&upstream=bluez","type":"apk","version":"5.86-r2","language":"","licenses":["GPL-2.0-or-later AND BSD-2-Clause AND MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ciptool"},{"path":"/usr/bin/gatttool"},{"path":"/usr/bin/hciattach"},{"path":"/usr/bin/hciconfig"},{"path":"/usr/bin/hcidump"},{"path":"/usr/bin/hcitool"},{"path":"/usr/bin/rfcomm"},{"path":"/usr/bin/sdptool"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bluez"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2020-24490","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:bluez:bluez:5.86:*:*:*:*:*:*:*"],"package":{"name":"bluez","version":"5.86-r2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2020-24490","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":3.3,"impactScore":2.9,"exploitabilityScore":6.5},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-24490","date":"2026-11-07","epss":0.02241,"percentile":0.8295}],"risk":1.109295,"urls":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24490","description":"Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ."},"relatedVulnerabilities":[]},{"artifact":{"id":"abb09a0267e58550","cpes":["cpe:2.3:a:bluez-libs:bluez-libs:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez-libs:bluez_libs:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez_libs:bluez-libs:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez_libs:bluez_libs:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez:bluez-libs:5.86-r2:*:*:*:*:*:*:*","cpe:2.3:a:bluez:bluez_libs:5.86-r2:*:*:*:*:*:*:*"],"name":"bluez-libs","purl":"pkg:apk/alpine/bluez-libs@5.86-r2?arch=x86_64&distro=alpine-3.24.2&upstream=bluez","type":"apk","version":"5.86-r2","language":"","licenses":["GPL-2.0-or-later AND BSD-2-Clause AND MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libbluetooth.so.3"},{"path":"/usr/lib/libbluetooth.so.3.19.16"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bluez"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2020-24490","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:bluez:bluez:5.86:*:*:*:*:*:*:*"],"package":{"name":"bluez","version":"5.86-r2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2020-24490","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":3.3,"impactScore":2.9,"exploitabilityScore":6.5},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-24490","date":"2026-11-07","epss":0.02241,"percentile":0.8295}],"risk":1.109295,"urls":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24490","description":"Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ."},"relatedVulnerabilities":[]},{"artifact":{"id":"8299daf0b2d763d5","cpes":["cpe:2.3:a:nmap:nmap:7.99-r0:*:*:*:*:*:*:*"],"name":"nmap","purl":"pkg:apk/alpine/nmap@7.99-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"7.99-r0","language":"","licenses":["custom"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/nmap"},{"path":"/usr/share"},{"path":"/usr/share/ncat"},{"path":"/usr/share/ncat/ca-bundle.crt"},{"path":"/usr/share/nmap"},{"path":"/usr/share/nmap/nmap-mac-prefixes"},{"path":"/usr/share/nmap/nmap-os-db"},{"path":"/usr/share/nmap/nmap-protocols"},{"path":"/usr/share/nmap/nmap-rpc"},{"path":"/usr/share/nmap/nmap-service-probes"},{"path":"/usr/share/nmap/nmap-services"},{"path":"/usr/share/nmap/nmap.dtd"},{"path":"/usr/share/nmap/nmap.xsl"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nmap"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:nmap:nmap:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58058","versionConstraint":"<= 7.99 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:nmap:nmap:7.99:*:*:*:*:*:*:*"],"package":{"name":"nmap","version":"7.99-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58058","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58058","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58058","date":"2026-11-07","epss":0.01454,"percentile":0.7361}],"risk":0.8505900000000001,"urls":["https://github.com/bikini/exploitarium/tree/main/nmap-ipv6-extlen-wrap-poc","https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83","https://nmap.org/changelog.html","https://www.vulncheck.com/advisories/nmap-integer-underflow-in-ipv6-extension-header-parsing"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58058","description":"Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash during raw IPv6 scans."},"relatedVulnerabilities":[]},{"artifact":{"id":"f8dcdc464af558e5","cpes":["cpe:2.3:a:tlsfuzzer:ecdsa:0.19.2:*:*:*:*:python:*:*"],"name":"ecdsa","purl":"pkg:pypi/ecdsa@0.19.2","type":"python","version":"0.19.2","language":"python","licenses":["MIT"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/ecdsa-0.19.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wj6h-64fc-37mp","versionConstraint":">=0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"ecdsa","version":"0.19.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-wj6h-64fc-37mp","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23342","cwe":"CWE-203","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-23342","cwe":"CWE-208","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-23342","cwe":"CWE-385","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-23342","date":"2026-11-07","epss":0.00985,"percentile":0.62585}],"risk":0.733825,"urls":["https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp","https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md","https://nvd.nist.gov/vuln/detail/CVE-2024-23342","https://minerva.crocs.fi.muni.cz","https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wj6h-64fc-37mp","description":"Minerva timing attack on P-256 in python-ecdsa"},"relatedVulnerabilities":[{"id":"CVE-2024-23342","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23342","cwe":"CWE-203","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-23342","cwe":"CWE-208","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-23342","cwe":"CWE-385","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-23342","date":"2026-11-07","epss":0.00985,"percentile":0.62585}],"urls":["https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md","https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp","https://minerva.crocs.fi.muni.cz/","https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-23342","description":"The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists."}]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67215","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67215","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67215","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67215","date":"2026-11-07","epss":0.007,"percentile":0.534}],"risk":0.546,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261","https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67215","description":"cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"891f174ca90db8d5","cpes":["cpe:2.3:a:gnome:glib:2.88.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib:2.88.1-r1:*:*:*:*:*:*:*"],"name":"glib","purl":"pkg:apk/alpine/glib@2.88.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.88.1-r1","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/gapplication"},{"path":"/usr/bin/gdbus"},{"path":"/usr/bin/gi-compile-repository"},{"path":"/usr/bin/gi-decompile-typelib"},{"path":"/usr/bin/gi-inspect-typelib"},{"path":"/usr/bin/gio"},{"path":"/usr/bin/gio-querymodules"},{"path":"/usr/bin/glib-compile-schemas"},{"path":"/usr/bin/gsettings"},{"path":"/usr/lib"},{"path":"/usr/lib/libgio-2.0.so.0"},{"path":"/usr/lib/libgio-2.0.so.0.8800.1"},{"path":"/usr/lib/libgirepository-2.0.so.0"},{"path":"/usr/lib/libgirepository-2.0.so.0.8800.1"},{"path":"/usr/lib/libglib-2.0.so.0"},{"path":"/usr/lib/libglib-2.0.so.0.8800.1"},{"path":"/usr/lib/libgmodule-2.0.so.0"},{"path":"/usr/lib/libgmodule-2.0.so.0.8800.1"},{"path":"/usr/lib/libgobject-2.0.so.0"},{"path":"/usr/lib/libgobject-2.0.so.0.8800.1"},{"path":"/usr/lib/libgthread-2.0.so.0"},{"path":"/usr/lib/libgthread-2.0.so.0.8800.1"},{"path":"/usr/lib/gio"},{"path":"/usr/lib/gio/modules"},{"path":"/usr/lib/girepository-1.0"},{"path":"/usr/lib/girepository-1.0/GIRepository-3.0.typelib"},{"path":"/usr/lib/girepository-1.0/GLib-2.0.typelib"},{"path":"/usr/lib/girepository-1.0/GLibUnix-2.0.typelib"},{"path":"/usr/lib/girepository-1.0/GModule-2.0.typelib"},{"path":"/usr/lib/girepository-1.0/GObject-2.0.typelib"},{"path":"/usr/lib/girepository-1.0/Gio-2.0.typelib"},{"path":"/usr/lib/girepository-1.0/GioUnix-2.0.typelib"},{"path":"/usr/libexec"},{"path":"/usr/libexec/gio-launch-desktop"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58016","versionConstraint":"< 2.89.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnome:glib:2.88.1:*:*:*:*:*:*:*"],"package":{"name":"glib","version":"2.88.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58016","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58016","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58016","date":"2026-11-07","epss":0.0056,"percentile":0.46825}],"risk":0.4844,"urls":["https://access.redhat.com/errata/RHSA-2026:42063","https://access.redhat.com/errata/RHSA-2026:42089","https://access.redhat.com/errata/RHSA-2026:42090","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:51175","https://access.redhat.com/errata/RHSA-2026:51176","https://access.redhat.com/errata/RHSA-2026:51177","https://access.redhat.com/errata/RHSA-2026:51181","https://access.redhat.com/errata/RHSA-2026:51182","https://access.redhat.com/errata/RHSA-2026:51183","https://access.redhat.com/errata/RHSA-2026:51184","https://access.redhat.com/errata/RHSA-2026:51185","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-58016","https://bugzilla.redhat.com/show_bug.cgi?id=2492257","https://gitlab.gnome.org/GNOME/glib/-/issues/3932"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58016","description":"A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67216","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67216","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67216","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67216","date":"2026-11-07","epss":0.00645,"percentile":0.51195}],"risk":0.474075,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67216","description":"cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nesting. An application that calls cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document is exposed to a denial-of-service condition."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69650","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69650","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-11-07","epss":0.00588,"percentile":0.48364}],"risk":0.441,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","description":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"f7ad0ee8f1c27cb0","cpes":["cpe:2.3:a:musl-libc:musl:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl_libc:musl:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl:1.2.6-r2:*:*:*:*:*:*:*"],"name":"musl","purl":"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.6-r2","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/lib"},{"path":"/lib/ld-musl-x86_64.so.1"},{"path":"/lib/libc.musl-x86_64.so.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.6-r3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107891","versionConstraint":"< 1.2.6-r3 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"musl","version":"1.2.6-r2"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.2.6-r3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107891","versionConstraint":"< 1.2.6-r3 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"musl","version":"1.2.6-r2"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-107891","fix":{"state":"fixed","versions":["1.2.6-r3"],"available":[{"date":"2026-10-22","kind":"first-observed","version":"1.2.6-r3"}]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107891","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107891","date":"2026-11-07","epss":0.00549,"percentile":0.46178}],"risk":0.42822,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-107891"},"relatedVulnerabilities":[{"id":"CVE-2026-107891","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107891","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107891","date":"2026-11-07","epss":0.00549,"percentile":0.46178}],"urls":["https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941","https://musl.libc.org","https://www.openwall.com/lists/musl/2026/10/21/1","http://www.openwall.com/lists/oss-security/2026/10/21/18"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107891","description":"musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes."}]},{"artifact":{"id":"3b2be12f9ca81c73","cpes":["cpe:2.3:a:musl-utils:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-utils:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl_utils:1.2.6-r2:*:*:*:*:*:*:*"],"name":"musl-utils","purl":"pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=alpine-3.24.2&upstream=musl","type":"apk","version":"1.2.6-r2","language":"","licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/sbin"},{"path":"/sbin/ldconfig"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/getconf"},{"path":"/usr/bin/getent"},{"path":"/usr/bin/iconv"},{"path":"/usr/bin/ldd"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.6-r3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107891","versionConstraint":"< 1.2.6-r3 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"musl","version":"1.2.6-r2"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-107891","fix":{"state":"fixed","versions":["1.2.6-r3"],"available":[{"date":"2026-10-22","kind":"first-observed","version":"1.2.6-r3"}]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107891","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107891","date":"2026-11-07","epss":0.00549,"percentile":0.46178}],"risk":0.42822,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-107891"},"relatedVulnerabilities":[{"id":"CVE-2026-107891","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107891","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107891","date":"2026-11-07","epss":0.00549,"percentile":0.46178}],"urls":["https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941","https://musl.libc.org","https://www.openwall.com/lists/musl/2026/10/21/1","http://www.openwall.com/lists/oss-security/2026/10/21/18"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107891","description":"musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes."}]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\=3.3.0,<4.0.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"oauthlib","version":"3.3.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-3jp2-3mrg-2vxc","fix":{"state":"fixed","versions":["4.0.1"],"available":[{"date":"2026-11-06","kind":"first-observed","version":"4.0.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N","metrics":{"baseScore":8.5,"impactScore":4.8,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49272","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49272","date":"2026-11-07","epss":0.00328,"percentile":0.26053}],"risk":0.2624,"urls":["https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc","https://github.com/oauthlib/oauthlib/pull/954","https://github.com/oauthlib/oauthlib/commit/77a5f1c8ce00da2b0b8c5f6e9cc129920085f114","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.1"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3jp2-3mrg-2vxc","description":"OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow"},"relatedVulnerabilities":[{"id":"CVE-2026-49272","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N","metrics":{"baseScore":8.5,"impactScore":4.8,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49272","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49272","date":"2026-11-07","epss":0.00328,"percentile":0.26053}],"urls":["https://github.com/oauthlib/oauthlib/commit/77a5f1c8ce00da2b0b8c5f6e9cc129920085f114","https://github.com/oauthlib/oauthlib/pull/954","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.1","https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49272","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code parameter is present and valid. A caller whose client request is accepted by the configured validator and who knows a valid client ID enabled for the device workflow can submit a missing or bogus device code to the token endpoint and obtain a bearer token without completing device authorization. This issue is fixed in version 4.0.1."}]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-16554","versionConstraint":"= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-16554","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16554","cwe":"CWE-190","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-16554","date":"2026-11-07","epss":0.00367,"percentile":0.30737}],"risk":0.2559825,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-16554","https://github.com/DaveGamble/cJSON","http://www.openwall.com/lists/oss-security/2026/07/30/26","http://www.openwall.com/lists/oss-security/2026/07/31/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16554","description":"cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An attacker supplying a crafted JSON string to an application using cJSON on a 32-bit platform can cause a heap buffer overflow, potentially leading to remote code execution, information disclosure, or denial of service.\n\n\n\n\nBecause project creator contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.7.19 but may also affect other versions."},"relatedVulnerabilities":[]},{"artifact":{"id":"866d5ad466ccb567","cpes":["cpe:2.3:a:oauthlib_community_project:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:oauthlib:3.3.1:*:*:*:*:*:*:*"],"name":"oauthlib","purl":"pkg:pypi/oauthlib@3.3.1","type":"python","version":"3.3.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7984-qgvg-3j9c","versionConstraint":"<4.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"oauthlib","version":"3.3.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-7984-qgvg-3j9c","fix":{"state":"fixed","versions":["4.0.0"],"available":[{"date":"2026-10-31","kind":"first-observed","version":"4.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118669","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-118669","date":"2026-11-07","epss":0.00312,"percentile":0.24276}],"risk":0.24804,"urls":["https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c","https://nvd.nist.gov/vuln/detail/CVE-2026-118669","https://github.com/oauthlib/oauthlib/pull/920","https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7984-qgvg-3j9c","description":"OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client"},"relatedVulnerabilities":[{"id":"CVE-2026-118669","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118669","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-118669","date":"2026-11-07","epss":0.00312,"percentile":0.24276}],"urls":["https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d","https://github.com/oauthlib/oauthlib/pull/920","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118669","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.client_id for validate_grant_type and validate_scopes. A lower-privilege authenticated client can therefore cause grant and scope authorization to use another client's identity when an application validator relies on the documented client_id argument, potentially issuing tokens with unauthorized grants or scopes. Validators that authorize exclusively from request.client may not be affected. This issue is fixed in version 4.0.0."}]},{"artifact":{"id":"193eb40fb65beba6","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r1:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.3.2-r1","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-4738","fix":{"state":"fixed","versions":["1.4-r0"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1.4-r0"}]},"cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-07","epss":0.00263,"percentile":0.18185}],"risk":0.24196,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-4738"},"relatedVulnerabilities":[{"id":"CVE-2026-4738","cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-07","epss":0.00263,"percentile":0.18185}],"urls":["https://github.com/OSGeo/gdal/pull/12244"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4738","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎.\n\nThis issue affects gdal: before 3.11.0."}]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67217","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67217","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67217","cwe":"CWE-696","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67217","date":"2026-11-07","epss":0.00433,"percentile":0.37798}],"risk":0.24031499999999997,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L887-L948","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-non-atomic-application-destroys-data-before-validation"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67217","description":"cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operation is fully validated, so the target document is mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure status. An attacker who can supply the patch document can destroy addressable members of the target document even though the API reports that the patch failed, defeating the all-or-nothing behavior callers rely on to reject bad patches."},"relatedVulnerabilities":[]},{"artifact":{"id":"b546d82cdb74d376","cpes":["cpe:2.3:a:libssh2:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh:1.11.1-r4:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:apk/alpine/libssh2@1.11.1-r4?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.11.1-r4","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssh2.so.1"},{"path":"/usr/lib/libssh2.so.1.0.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libssh2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59850","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:libssh:libssh:1.11.1:*:*:*:*:*:*:*"],"package":{"name":"libssh2","version":"1.11.1-r4"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59850","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59850","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-59850","date":"2026-11-07","epss":0.00346,"percentile":0.28322}],"risk":0.23182000000000003,"urls":["https://access.redhat.com/errata/RHSA-2026:42922","https://access.redhat.com/errata/RHSA-2026:55855","https://access.redhat.com/errata/RHSA-2026:62217","https://access.redhat.com/errata/RHSA-2026:62218","https://access.redhat.com/security/cve/CVE-2026-59850","https://bugzilla.redhat.com/show_bug.cgi?id=2498183"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59850","description":"A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions."},"relatedVulnerabilities":[]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\=0.15,<=1.9.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"authlib","version":"1.7.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-c73q-w75p-j82v","fix":{"state":"fixed","versions":["1.9.1"],"available":[{"date":"2026-10-31","kind":"first-observed","version":"1.9.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116672","cwe":"CWE-639","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-116672","cwe":"CWE-1188","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116672","date":"2026-11-07","epss":0.00274,"percentile":0.19908}],"risk":0.22331,"urls":["https://github.com/authlib/authlib/security/advisories/GHSA-c73q-w75p-j82v","https://nvd.nist.gov/vuln/detail/CVE-2026-116672","https://github.com/authlib/authlib/commit/1bd2a313492ce0a4d0571c150730907aa3fc91ff","https://github.com/authlib/authlib/releases/tag/v1.9.1"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c73q-w75p-j82v","description":"Authlib RFC 7592 examples omit registration-access-token client binding"},"relatedVulnerabilities":[{"id":"CVE-2026-116672","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116672","cwe":"CWE-639","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-116672","cwe":"CWE-1188","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116672","date":"2026-11-07","epss":0.00274,"percentile":0.19908}],"urls":["https://github.com/authlib/authlib/commit/1bd2a313492ce0a4d0571c150730907aa3fc91ff","https://github.com/authlib/authlib/releases/tag/v1.9.1","https://github.com/authlib/authlib/security/advisories/GHSA-c73q-w75p-j82v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116672","description":"Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission reference implementations look up a target client from request-controlled client_id data and check only whether that target is editable, without verifying that request.credential belongs to the target client. Deployments following both examples can allow a client holding any valid registration access token to read, modify, or delete another client's registration. Changing redirect_uris can enable authorization code or token interception, while deleting registrations can deny service to affected clients. This issue is fixed in version 1.9.1."}]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\=1.6.0,<1.9.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"authlib","version":"1.7.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-x4rv-c3wx-4cr8","fix":{"state":"fixed","versions":["1.9.0"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"1.9.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114620","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114620","date":"2026-11-07","epss":0.00385,"percentile":0.32818}],"risk":0.20020000000000004,"urls":["https://github.com/authlib/authlib/security/advisories/GHSA-x4rv-c3wx-4cr8","https://nvd.nist.gov/vuln/detail/CVE-2026-114620","https://github.com/authlib/authlib/pull/949","https://github.com/authlib/authlib/commit/6563f6f7a8c2f71d2f85ee7511d72a4fbae3acc0","https://github.com/authlib/authlib/commit/891e3f10ae5989176211f8be35dcc7cd40aa92c6","https://github.com/authlib/authlib/releases/tag/v1.9.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x4rv-c3wx-4cr8","description":"Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF"},"relatedVulnerabilities":[{"id":"CVE-2026-114620","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114620","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114620","date":"2026-11-07","epss":0.00385,"percentile":0.32818}],"urls":["https://github.com/authlib/authlib/commit/6563f6f7a8c2f71d2f85ee7511d72a4fbae3acc0","https://github.com/authlib/authlib/commit/891e3f10ae5989176211f8be35dcc7cd40aa92c6","https://github.com/authlib/authlib/pull/949","https://github.com/authlib/authlib/releases/tag/v1.9.0","https://github.com/authlib/authlib/security/advisories/GHSA-x4rv-c3wx-4cr8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114620","description":"Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object() hook before applying a destination or registration policy; the hook itself performs no network request, while the documentation demonstrates an unrestricted HTTP fetch. In deployments whose integrator implements that hook as an unrestricted outbound fetch, a remote attacker who knows a valid public client identifier can make the authorization server request internal, link-local, or otherwise unintended URLs and can distinguish fetch outcomes through different error responses and timing. Deployments whose custom hook already applies a secure allowlist, destination controls, and retrieval limits are not affected. The JWTAuthenticationRequest implementation in authlib/oauth2/rfc9101/authorization_server.py forwards request_uri to get_request_object() before an application-approved retrieval policy accepts the destination. This issue is fixed in version 1.9.0."}]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3442","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3442","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-11-07","epss":0.00265,"percentile":0.18498}],"risk":0.186825,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3442","https://bugzilla.redhat.com/show_bug.cgi?id=2443828"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","description":"A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119374","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119374","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-07","epss":0.0023,"percentile":0.13921}],"risk":0.179975,"urls":["https://abraxaslabs.tech/research/sqlite-fts5-securedel","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525","https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/9cd4f9e920","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-07","epss":0.00312,"percentile":0.24253}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-07","epss":0.00312,"percentile":0.24253}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-07","epss":0.00312,"percentile":0.24253}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-11-07","epss":0.00228,"percentile":0.13603}],"risk":0.17840999999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"b546d82cdb74d376","cpes":["cpe:2.3:a:libssh2:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh:1.11.1-r4:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:apk/alpine/libssh2@1.11.1-r4?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.11.1-r4","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssh2.so.1"},{"path":"/usr/lib/libssh2.so.1.0.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libssh2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59848","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:libssh:libssh:1.11.1:*:*:*:*:*:*:*"],"package":{"name":"libssh2","version":"1.11.1-r4"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59848","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59848","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-59848","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-59848","date":"2026-11-07","epss":0.00341,"percentile":0.27757}],"risk":0.175615,"urls":["https://access.redhat.com/errata/RHSA-2026:42922","https://access.redhat.com/errata/RHSA-2026:55855","https://access.redhat.com/errata/RHSA-2026:62217","https://access.redhat.com/errata/RHSA-2026:62218","https://access.redhat.com/security/cve/CVE-2026-59848","https://bugzilla.redhat.com/show_bug.cgi?id=2498181"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59848","description":"A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\=1.3.1,<=1.8.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"authlib","version":"1.7.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-7vr2-2fgp-9w7p","fix":{"state":"fixed","versions":["1.9.0"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"1.9.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114615","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-114615","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114615","date":"2026-11-07","epss":0.00213,"percentile":0.11652}],"risk":0.158685,"urls":["https://github.com/authlib/authlib/security/advisories/GHSA-7vr2-2fgp-9w7p","https://nvd.nist.gov/vuln/detail/CVE-2026-114615","https://github.com/authlib/authlib/pull/945","https://github.com/authlib/authlib/commit/e3bd41cb29dcfee434453b135ffb487884baeedf","https://github.com/authlib/authlib/releases/tag/v1.9.0"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7vr2-2fgp-9w7p","description":"Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys"},"relatedVulnerabilities":[{"id":"CVE-2026-114615","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114615","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-114615","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114615","date":"2026-11-07","epss":0.00213,"percentile":0.11652}],"urls":["https://github.com/authlib/authlib/commit/e3bd41cb29dcfee434453b135ffb487884baeedf","https://github.com/authlib/authlib/pull/945","https://github.com/authlib/authlib/releases/tag/v1.9.0","https://github.com/authlib/authlib/security/advisories/GHSA-7vr2-2fgp-9w7p"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114615","description":"Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed algorithm registry and already configure verification with PEM or certificate bytes containing such a prefix, an unauthenticated attacker who knows those same public-key bytes can use them as an HMAC secret and forge HS256 tokens with arbitrary identity or authorization claims. This is a bypass of the remediation for CVE-2024-37568. The module-level jwt object reaches OctKey.import_key() in authlib/jose/rfc7518/oct_key.py, where POSSIBLE_UNSAFE_KEYS fails to identify prefixed asymmetric key material. This issue is fixed in version 1.9.0."}]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69651","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69651","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69651","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69651","date":"2026-11-07","epss":0.00274,"percentile":0.19894}],"risk":0.14384999999999998,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"866d5ad466ccb567","cpes":["cpe:2.3:a:oauthlib_community_project:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:oauthlib:3.3.1:*:*:*:*:*:*:*"],"name":"oauthlib","purl":"pkg:pypi/oauthlib@3.3.1","type":"python","version":"3.3.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xpv3-w29h-x7cv","versionConstraint":">=3.0.0,<4.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"oauthlib","version":"3.3.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-xpv3-w29h-x7cv","fix":{"state":"fixed","versions":["4.0.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"4.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49265","cwe":"CWE-208","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49265","date":"2026-11-07","epss":0.00242,"percentile":0.15475}],"risk":0.14278,"urls":["https://github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv","https://github.com/oauthlib/oauthlib/pull/963","https://github.com/oauthlib/oauthlib/commit/40b0ab56da3682c2484a4b78bbff309f8025d950","https://nvd.nist.gov/vuln/detail/CVE-2026-49265","https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4114.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xpv3-w29h-x7cv","description":"Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)"},"relatedVulnerabilities":[{"id":"CVE-2026-49265","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49265","cwe":"CWE-208","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49265","date":"2026-11-07","epss":0.00242,"percentile":0.15475}],"urls":["https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0","https://github.com/oauthlib/oauthlib/pull/963","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","https://github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv","https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4114.yaml"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49265","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorization_code.py compare attacker-supplied code_verifier values with stored challenges using ordinary string equality in code_challenge_method_plain and code_challenge_method_s256. Because the comparison can return after a length difference or the first mismatching character, repeated token endpoint measurements can reveal common-prefix timing information that could potentially allow recovery of the code_verifier, unauthorized access-token acquisition, and account takeover. Practical exploitation requires an intercepted, single-use authorization code and enough measurements to overcome real-world network noise; the local timing benchmark does not establish practical remote account takeover, so the weakness remains a defense-in-depth concern. This issue is fixed in version 4.0.0."}]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119378","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119378","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-07","epss":0.00251,"percentile":0.16533}],"risk":0.13993250000000002,"urls":["https://abraxaslabs.tech/research/sqlite-rtree-rowid0","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905","https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/6a9e1415659f9e75","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120210","versionConstraint":">= 5.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-07","epss":0.00276,"percentile":0.20135}],"risk":0.13524,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3441","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3441","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-11-07","epss":0.00191,"percentile":0.08785}],"risk":0.134655,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3441","https://bugzilla.redhat.com/show_bug.cgi?id=2443826"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6846","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6846","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-11-07","epss":0.00171,"percentile":0.06512}],"risk":0.130815,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6846","https://bugzilla.redhat.com/show_bug.cgi?id=2460006","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","description":"A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable."},"relatedVulnerabilities":[]},{"artifact":{"id":"866d5ad466ccb567","cpes":["cpe:2.3:a:oauthlib_community_project:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community_project:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_communityproject:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib_community:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python-oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python_oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:oauthlib:oauthlib:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:python:oauthlib:3.3.1:*:*:*:*:*:*:*"],"name":"oauthlib","purl":"pkg:pypi/oauthlib@3.3.1","type":"python","version":"3.3.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/oauthlib-3.3.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hj66-6f7g-4r5v","versionConstraint":">=0.6.1,<=3.3.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"oauthlib","version":"3.3.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-hj66-6f7g-4r5v","fix":{"state":"fixed","versions":["4.0.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"4.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49264","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49264","date":"2026-11-07","epss":0.00234,"percentile":0.14433}],"risk":0.12986999999999999,"urls":["https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v","https://github.com/oauthlib/oauthlib/pull/951","https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c","https://nvd.nist.gov/vuln/detail/CVE-2026-49264","https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4113.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hj66-6f7g-4r5v","description":"Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation"},"relatedVulnerabilities":[{"id":"CVE-2026-49264","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49264","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49264","date":"2026-11-07","epss":0.00234,"percentile":0.14433}],"urls":["https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c","https://github.com/oauthlib/oauthlib/pull/951","https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49264","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter into success and error response bodies when enable_jsonp=True. The callback can come from the query string or request body and is used without restricting it to a legal JavaScript function name. A browser application that loads the revocation response as trusted JSONP and permits attacker influence over callback can therefore execute attacker-controlled JavaScript in the including application's origin, with access to its DOM and script-accessible data. The feature is disabled by default, so only deployments that explicitly enable JSONP are affected. This issue is fixed in version 4.0.0."}]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119373","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119373","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-07","epss":0.00162,"percentile":0.05447}],"risk":0.126765,"urls":["https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107","https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80","https://sqlite.org/bugs/info/2026-08-04T08:49:27Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/a7f8c92f62","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-11-07","epss":0.00145,"percentile":0.03788}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107886","versionConstraint":">= 1.4.8, < 2.4.20 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107886","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":6.5,"impactScore":5.2,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.3,"impactScore":1.5,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107886","cwe":"CWE-415","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107886","date":"2026-11-07","epss":0.00241,"percentile":0.15342}],"risk":0.11327,"urls":["https://github.com/OpenPrinting/cups/security/advisories/GHSA-pwg4-pv39-8c22"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107886","description":"OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69652","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69652","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69652","cwe":"CWE-460","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69652","date":"2026-11-07","epss":0.00202,"percentile":0.10228}],"risk":0.11312000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33701","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69648","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69648","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69648","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69648","date":"2026-11-07","epss":0.00202,"percentile":0.10202}],"risk":0.11312000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33641","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119375","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119375","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119375","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119375","date":"2026-11-07","epss":0.00195,"percentile":0.09218}],"risk":0.1087125,"urls":["https://abraxaslabs.tech/research/sqlite-wal-pagesize","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672","https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e","https://sqlite.org/bugs/info/2026-08-17T15:54:41Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f9b4ee369557c36c","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-information-disclosure-via-wal-page-size-mismatch"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119375","description":"SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55480","versionConstraint":"< 2.4.20 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55480","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":5.7,"impactScore":5.2,"exploitabilityScore":0.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55480","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55480","cwe":"CWE-377","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55480","date":"2026-11-07","epss":0.00202,"percentile":0.10273}],"risk":0.10807000000000001,"urls":["https://github.com/OpenPrinting/cups/commit/98adfd855950e806508f961d5438ad32e26aac62","https://github.com/OpenPrinting/cups/commit/f6a11dae0f0f3b748fbca931e237be03ffe8e48e","https://github.com/OpenPrinting/cups/releases/tag/v2.4.20","https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55480","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_model() in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without O_EXCL or O_NOFOLLOW. Exploitation requires an lp-group process able to write that directory to predict the connection-derived name and plant a symlink before the root open, while a privileged add-printer or modify-printer operation using a model PPD triggers copy_model(). The reporter treats an existing lp foothold and the privileged operation as distinct prerequisites, while the maintainer assesses high privileges because installing the relevant filter or administering the printer requires root or print-administrator access. If the race succeeds, the root scheduler follows the symlink and truncates or overwrites a root-writable target with generated PPD data, compromising file integrity or availability. This issue is fixed in version 2.4.20."},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119371","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119371","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119371","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119371","date":"2026-11-07","epss":0.00191,"percentile":0.08838}],"risk":0.1064825,"urls":["https://abraxaslabs.tech/research/sqlite-cte-nest","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L5754","https://github.com/sqlite/sqlite/commit/e6ff280c839fdfc7418fd5add12e8f32702a17fb","https://sqlite.org/bugs/info/2026-10-04T04:58:58Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f54730871303e655","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-cte-chain-in-selectexpander"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119371","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an untrusted database file, causing unbounded selectExpander() recursion that crashes the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119376","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119376","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119376","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119376","date":"2026-11-07","epss":0.00183,"percentile":0.0791}],"risk":0.1020225,"urls":["https://abraxaslabs.tech/research/sqlite-collate-depth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/expr.c#L175","https://github.com/sqlite/sqlite/commit/d54522a5b832422ab893a1e9fa7a99ab314ea4e2","https://sqlite.org/bugs/info/2026-10-04T04:50:56Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/252c0b7bf5a727d2","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-collate-operator-chain"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119376","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion in sqlite3WalkExprNN() and crash the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-11-07","epss":0.00186,"percentile":0.0821}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69647","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69647","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69647","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69647","date":"2026-11-07","epss":0.00178,"percentile":0.07432}],"risk":0.09967999999999999,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33640","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56109","versionConstraint":"< 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56109","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.8,"impactScore":4.3,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56109","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-56109","date":"2026-11-07","epss":0.00138,"percentile":0.03225}],"risk":0.09935999999999999,"urls":["https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0","https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1","https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56109","description":"The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-11-07","epss":0.00178,"percentile":0.07401}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-11-07","epss":0.00158,"percentile":0.04964}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-11-07","epss":0.00175,"percentile":0.07021}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119591","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119591","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119591","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119591","date":"2026-11-07","epss":0.00171,"percentile":0.06534}],"risk":0.0953325,"urls":["https://abraxaslabs.tech/research/sqlite-values-union","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L7199","https://github.com/sqlite/sqlite/commit/eff50a067c55f972909e7780e506e91382d08de2","https://sqlite.org/bugs/info/2026-10-04T05:34:47Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/ab621a3e11ee4acc","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-countofviewoptimization-in-values-clause"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119591","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4647","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4647","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-11-07","epss":0.00171,"percentile":0.0652}],"risk":0.09490499999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-4647","https://bugzilla.redhat.com/show_bug.cgi?id=2450302","https://sourceware.org/bugzilla/show_bug.cgi?id=33919"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","description":"A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-90781","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-90781","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90781","cwe":"CWE-193","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-90781","date":"2026-11-07","epss":0.00179,"percentile":0.07529}],"risk":0.08592,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241","https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020","https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90781","description":"alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-11-07","epss":0.00176,"percentile":0.07133}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-11-07","epss":0.00186,"percentile":0.08271}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-11-07","epss":0.00186,"percentile":0.08271}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-11-07","epss":0.00186,"percentile":0.08271}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-11-07","epss":0.00186,"percentile":0.08271}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119372","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119372","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119372","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119372","date":"2026-11-07","epss":0.00147,"percentile":0.03969}],"risk":0.0819525,"urls":["https://abraxaslabs.tech/research/sqlite-fts3-snippet","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts3/fts3_snippet.c#L561","https://github.com/sqlite/sqlite/commit/a87bd2471a9c0606e78d3c3678bcd9cecaa0e731","https://sqlite.org/bugs/info/2026-08-17T09:18:24Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/e4635c4153","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-fts3-fts3bestsnippet-via-snippet"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119372","description":"SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-11-07","epss":0.00108,"percentile":0.01199}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"9dcb70fb0d495c95","cpes":["cpe:2.3:a:hsiaoming_yang_\\= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120245","versionConstraint":">= 0.10, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120245","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120245","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120245","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24877","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/sunrast.c#L188-L194","https://github.com/FFmpeg/FFmpeg/commit/356a391bf57df2fb80fd61f2821c8c83d15ce180","https://github.com/FFmpeg/FFmpeg/commit/66b6ca270b33fd74367d7d371f6de16ec664446e","https://www.vulncheck.com/advisories/ffmpeg-0.10-through-9.0.2-uninitialized-memory-disclosure-via-sun-raster-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120245","description":"FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a truncated Sun Raster file so the uncleared temporary bitmap is expanded into PAL8 pixels, exposing stale heap contents such as allocator words in decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120247","versionConstraint":">= 2.3, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120247","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120247","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120247","date":"2026-11-07","epss":0.00124,"percentile":0.02129}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24869","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/huffyuvdec.c#L802","https://github.com/FFmpeg/FFmpeg/commit/7c73707355708c846f718cca90096bc1a33c8989","https://www.vulncheck.com/advisories/ffmpeg-2.3-through-9.0.2-huffyuv-decoder-uninitialized-heap-memory-disclosure"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120247","description":"FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decode_slice() to add uninitialized s->temp[0] bytes into output frames, exposing heap contents."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120243","versionConstraint":">= 2.0, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120243","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120243","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120243","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24858","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/g2meet.c#L1040-L1042","https://github.com/FFmpeg/FFmpeg/commit/edad2d0dafcf44fa315eab716fd0183ce808053b","https://www.vulncheck.com/advisories/ffmpeg-2.0-through-9.0.2-information-disclosure-via-g2m-kempf-palette"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120243","description":"FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf_restore_buf() copies uninitialized stack bytes, including pointers or stack guards, into decoded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120244","versionConstraint":">= 2.1, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120244","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120244","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120244","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24868","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcx.c#L45-L59","https://github.com/FFmpeg/FFmpeg/commit/ecd5dfc308a164757e7f25b1afefd8db21b43cf9","https://www.vulncheck.com/advisories/ffmpeg-2.1-through-9.0.2-uninitialized-memory-leak-via-pcx-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120244","description":"FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120246","versionConstraint":">= 4.4, <= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120246","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120246","cwe":"CWE-457","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120246","date":"2026-11-07","epss":0.00124,"percentile":0.02128}],"risk":0.06913,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24856","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/cdxl.c#L226-L229","https://github.com/FFmpeg/FFmpeg/commit/47313ad3f9f33b892384b976fb7c09b3c85fd74e","https://www.vulncheck.com/advisories/ffmpeg-4.4-through-9.0.2-uninitialized-memory-disclosure-via-cdxl-ham-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120246","description":"FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled new_palette entries in cdxl_decode_ham8() or cdxl_decode_ham6(), exposing stack bytes and pointer fragments in the BGR24 output."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107885","versionConstraint":"< 2.4.21 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107885","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107885","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107885","date":"2026-11-07","epss":0.00147,"percentile":0.03985}],"risk":0.06909,"urls":["https://github.com/OpenPrinting/cups/security/advisories/GHSA-hhw5-qqmc-p6rg"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107885","description":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107888","versionConstraint":"< 2.4.20 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107888","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.1,"impactScore":3.6,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107888","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107888","date":"2026-11-07","epss":0.00133,"percentile":0.02834}],"risk":0.068495,"urls":["https://github.com/OpenPrinting/cups/security/advisories/GHSA-qqm8-4q5h-jg55"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107888","description":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-07","epss":0.00131,"percentile":0.02731}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-07","epss":0.00131,"percentile":0.02731}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-07","epss":0.00131,"percentile":0.02731}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.2&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-11-07","epss":0.00131,"percentile":0.02731}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-11-07","epss":0.00142,"percentile":0.0357}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55453","versionConstraint":"< 2.4.20 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55453","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55453","cwe":"CWE-74","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55453","cwe":"CWE-77","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55453","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55453","date":"2026-11-07","epss":0.00195,"percentile":0.09215}],"risk":0.06142499999999999,"urls":["https://github.com/OpenPrinting/cups/commit/806e1b483096c51d59432468f4afdd7387d81dd7","https://github.com/OpenPrinting/cups/commit/d41cf0616688721e9d435d54118c4c8a36ed596a","https://github.com/OpenPrinting/cups/releases/tag/v2.4.20","https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55453","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quote_string() function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before report_attr() writes the value to the scheduler status stream. The scheduler can parse an injected newline as a separate PPD: control line and persist an attacker-selected PPD keyword. The reporter demonstrated that a later print job on a Foomatic-backed queue could consume an injected FoomaticRIPCommandLine value and execute in the filter context as lp. This issue is fixed in version 2.4.20."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96674","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96674","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96674","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96674","date":"2026-11-07","epss":0.00115,"percentile":0.01568}],"risk":0.0552,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96674","description":"alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"b546d82cdb74d376","cpes":["cpe:2.3:a:libssh2:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh:1.11.1-r4:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:apk/alpine/libssh2@1.11.1-r4?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.11.1-r4","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssh2.so.1"},{"path":"/usr/lib/libssh2.so.1.0.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libssh2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59845","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:libssh:libssh:1.11.1:*:*:*:*:*:*:*"],"package":{"name":"libssh2","version":"1.11.1-r4"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59845","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":4,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":4,"exploitabilityScore":0.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59845","cwe":"CWE-390","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-59845","cwe":"CWE-390","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-59845","date":"2026-11-07","epss":0.00104,"percentile":0.01021}],"risk":0.055119999999999995,"urls":["https://access.redhat.com/errata/RHSA-2026:42922","https://access.redhat.com/errata/RHSA-2026:55855","https://access.redhat.com/errata/RHSA-2026:62217","https://access.redhat.com/errata/RHSA-2026:62218","https://access.redhat.com/security/cve/CVE-2026-59845","https://bugzilla.redhat.com/show_bug.cgi?id=2498178"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59845","description":"A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6844","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6844","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-11-07","epss":0.00104,"percentile":0.01025}],"risk":0.054599999999999996,"urls":["https://access.redhat.com/security/cve/CVE-2026-6844","https://bugzilla.redhat.com/show_bug.cgi?id=2460016"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6844","description":"A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96675","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96675","cwe":"CWE-129","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96675","date":"2026-11-07","epss":0.00111,"percentile":0.01321}],"risk":0.05022750000000001,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/pcm/pcm_multi.c#L1122-L1131","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-denial-of-service-via-pcm-multi"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96675","description":"alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort."},"relatedVulnerabilities":[]},{"artifact":{"id":"3d4c0531ada19181","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-55467","versionConstraint":"< 2.4.20 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-55467","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55467","cwe":"CWE-93","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55467","cwe":"CWE-94","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55467","cwe":"CWE-150","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55467","date":"2026-11-07","epss":0.00182,"percentile":0.07859}],"risk":0.05005000000000001,"urls":["https://github.com/OpenPrinting/cups/commit/0cf4e7814d6810ed3c454222bce3aa342d541681","https://github.com/OpenPrinting/cups/commit/a9e7e7a3a019d0fa063d29409d3f82e4c6d5a008","https://github.com/OpenPrinting/cups/releases/tag/v2.4.20","https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55467","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the cupsdCreateJob option-string builder in scheduler/job.c maps attacker-controlled destination-uri and pre-dial-string values from a configured fax queue to the phone and faxPrefix options. Unlike ordinary IPP job attributes, these mapped fax values bypass the control-character sanitizer and are copied directly into the filter options argument. A user permitted to submit a job can therefore inject control characters into the downstream option stream. The reporter states that a downstream fax filter passing these values to a shell or modem command could execute code as lp, while the maintainer states that CUPS has no confidentiality or integrity impact because the only known code-executing filter is optional Foomatic and addressed separately, leaving possible disruption of the affected queue. This issue is fixed in version 2.4.20."},"relatedVulnerabilities":[]},{"artifact":{"id":"22a19bd0c7ff8b0d","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:apk/alpine/ffmpeg@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ffmpeg"},{"path":"/usr/bin/ffprobe"},{"path":"/usr/bin/qt-faststart"},{"path":"/usr/share"},{"path":"/usr/share/ffmpeg"},{"path":"/usr/share/ffmpeg/ffprobe.xsd"},{"path":"/usr/share/ffmpeg/libvpx-1080p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-360p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p.ffpreset"},{"path":"/usr/share/ffmpeg/libvpx-720p50_60.ffpreset"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"baf70fe7251b99de","cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"name":"ffmpeg","purl":"pkg:generic/ffmpeg@9.0.2","type":"binary","version":"9.0.2","language":"","licenses":[],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavcodec-fe4e44a3.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavdevice-2c936b5e.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavfilter-8258c819.so.12.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavformat-0fba8c07.so.63.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libavutil-7fdd9ee1.so.61.1.102","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/av.libs/libswresample-418f486a.so.7.1.102","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:9.0.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"9.0.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"36e434d55cafa641","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"07c7196972b97b4f","cpes":["cpe:2.3:a:ffmpeg-libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavdevice:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavdevice:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavdevice:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavdevice","purl":"pkg:apk/alpine/ffmpeg-libavdevice@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavdevice.so.62"},{"path":"/usr/lib/libavdevice.so.62.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"8074a3e004382d91","cpes":["cpe:2.3:a:ffmpeg-libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavfilter:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavfilter:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavfilter:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavfilter","purl":"pkg:apk/alpine/ffmpeg-libavfilter@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavfilter.so.11"},{"path":"/usr/lib/libavfilter.so.11.14.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"41f5a9de80bcb1fa","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"dad5cbf4d1fa92ce","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"ed935c8de307003e","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"b42db4318289a9fc","cpes":["cpe:2.3:a:ffmpeg-libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswscale:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswscale:8.1.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswscale:8.1.3-r0:*:*:*:*:*:*:*"],"name":"ffmpeg-libswscale","purl":"pkg:apk/alpine/ffmpeg-libswscale@8.1.3-r0?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.3-r0","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswscale.so.9"},{"path":"/usr/lib/libswscale.so.9.5.103"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.3:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-11-07","epss":0.00093,"percentile":0.00518}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"b546d82cdb74d376","cpes":["cpe:2.3:a:libssh2:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh2:1.11.1-r4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh:1.11.1-r4:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:apk/alpine/libssh2@1.11.1-r4?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.11.1-r4","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssh2.so.1"},{"path":"/usr/lib/libssh2.so.1.0.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libssh2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-59846","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:libssh:libssh:1.11.1:*:*:*:*:*:*:*"],"package":{"name":"libssh2","version":"1.11.1-r4"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-59846","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59846","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-59846","cwe":"CWE-77","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-59846","date":"2026-11-07","epss":0.0012,"percentile":0.01826}],"risk":0.04139999999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:42922","https://access.redhat.com/errata/RHSA-2026:55855","https://access.redhat.com/errata/RHSA-2026:62217","https://access.redhat.com/errata/RHSA-2026:62218","https://access.redhat.com/security/cve/CVE-2026-59846","https://bugzilla.redhat.com/show_bug.cgi?id=2498179"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59846","description":"A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"75a6203c92295136","cpes":["cpe:2.3:a:jeff_forcier_project:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcier_project:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcierproject:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcierproject:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python-paramiko:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python-paramiko:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python_paramiko:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python_paramiko:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcier_project:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcier:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcier:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcierproject:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_project:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_project:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeffproject:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeffproject:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:paramiko:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:paramiko:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python-paramiko:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python_paramiko:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_forcier:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff_project:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff:python-paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff:python_paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeffproject:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:paramiko:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:python:paramiko:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:jeff:paramiko:3.5.0:*:*:*:*:*:*:*"],"name":"paramiko","purl":"pkg:pypi/paramiko@3.5.0","type":"python","version":"3.5.0","language":"python","licenses":["LGPL"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/paramiko-3.5.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r374-rxx8-8654","versionConstraint":"<5.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"paramiko","version":"3.5.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-r374-rxx8-8654","fix":{"state":"fixed","versions":["5.0.0"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"5.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44405","cwe":"CWE-327","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-44405","date":"2026-11-07","epss":0.00114,"percentile":0.01475}],"risk":0.03647999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-44405","https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb","https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf","https://github.com/paramiko/paramiko","https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2026-2858.yaml","https://pypi.org/project/paramiko"],"severity":"Low","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r374-rxx8-8654","description":"Paramiko rsakey.py allows the SHA-1 algorithm"},"relatedVulnerabilities":[{"id":"CVE-2026-44405","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44405","cwe":"CWE-327","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-44405","date":"2026-11-07","epss":0.00114,"percentile":0.01475}],"urls":["https://github.com/paramiko/paramiko/commit/a4489456b6f65281e172380cc4826cee5e851dbb","https://ostif.org/wp-content/uploads/2026/05/25-11-2415-REP_paramiko-security-audit_v1.1.pdf"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44405","description":"In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm."}]},{"artifact":{"id":"1a67e55521b4ee38","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.53.4-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.53.4-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=alpine-3.24.2&upstream=sqlite","type":"apk","version":"3.53.4-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.53.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119377","versionConstraint":"< 3.54.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.53.4:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.53.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119377","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119377","cwe":"CWE-863","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119377","date":"2026-11-07","epss":0.00129,"percentile":0.02516}],"risk":0.03612,"urls":["https://abraxaslabs.tech/research/sqlite-fj-using-auth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/resolve.c#L775","https://github.com/sqlite/sqlite/commit/5694c3bb2a6a40770ecd2f65910eea756734dfd8","https://github.com/sqlite/sqlite/commit/7ff247c5b9ead3ad8a69c26d3fd264878e127237","https://sqlite.org/bugs/info/2026-07-05T08:15:45Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/2cb22877683680c1","https://sqlite.org/src/info/bbd69ce274620008","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-authorizer-bypass-via-right-or-full-join-using"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119377","description":"SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions."},"relatedVulnerabilities":[]},{"artifact":{"id":"67434b5b7bf677e0","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uv","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uv","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c8m5-c952-6cm4","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-c8m5-c952-6cm4","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":4,"impactScore":3.6,"exploitabilityScore":0.4},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-c8m5-c952-6cm4","https://github.com/rustls/rustls/pull/3299","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/dcdb9464d376f45f42a94a5f837cda1506449f23","https://github.com/rustls/rustls/commit/f5f7bf5078a7edcbd81a9e82a97f2bd14dc1c855","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0346.html"],"severity":"Medium","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c8m5-c952-6cm4","description":"Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs"},"relatedVulnerabilities":[]},{"artifact":{"id":"982e4b7937503896","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uvx","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uvx","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c8m5-c952-6cm4","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-c8m5-c952-6cm4","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":4,"impactScore":3.6,"exploitabilityScore":0.4},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-c8m5-c952-6cm4","https://github.com/rustls/rustls/pull/3299","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/dcdb9464d376f45f42a94a5f837cda1506449f23","https://github.com/rustls/rustls/commit/f5f7bf5078a7edcbd81a9e82a97f2bd14dc1c855","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0346.html"],"severity":"Medium","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c8m5-c952-6cm4","description":"Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs"},"relatedVulnerabilities":[]},{"artifact":{"id":"cbd77e4fe96fe423","cpes":["cpe:2.3:a:rust-random:rand:0.9.1:*:*:*:*:rust:*:*"],"name":"rand","purl":"pkg:cargo/rand@0.9.1","type":"rust-crate","version":"0.9.1","language":"rust","licenses":[],"locations":[{"path":"/usr/lib/librav1e.so.0.8.1","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/lib/librav1e.so.0.8.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.9.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cq8v-f236-94qc","versionConstraint":">=0.9.0,<0.9.3 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rand","version":"0.9.1"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-cq8v-f236-94qc","fix":{"state":"fixed","versions":["0.9.3"],"available":[{"date":"2026-04-14","kind":"first-observed","version":"0.9.3"}]},"cvss":[],"risk":0,"urls":["https://github.com/rust-random/rand/pull/1763","https://rustsec.org/advisories/RUSTSEC-2026-0097.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cq8v-f236-94qc","description":"Rand is unsound with a custom logger using rand::rng()"},"relatedVulnerabilities":[]},{"artifact":{"id":"982e4b7937503896","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uvx","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uvx","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h2v8-394m-p7vv","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-h2v8-394m-p7vv","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-h2v8-394m-p7vv","https://github.com/rustls/rustls/pull/3297","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/1aa987af37d0d79b98781d345895ac0059ce345c","https://github.com/rustls/rustls/commit/402b7b78b7ae87d59e19cf07ee07f3fc19e6537e","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0348.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h2v8-394m-p7vv","description":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication."},"relatedVulnerabilities":[]},{"artifact":{"id":"67434b5b7bf677e0","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uv","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uv","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h2v8-394m-p7vv","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-h2v8-394m-p7vv","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-h2v8-394m-p7vv","https://github.com/rustls/rustls/pull/3297","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/1aa987af37d0d79b98781d345895ac0059ce345c","https://github.com/rustls/rustls/commit/402b7b78b7ae87d59e19cf07ee07f3fc19e6537e","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0348.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h2v8-394m-p7vv","description":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication."},"relatedVulnerabilities":[]},{"artifact":{"id":"67434b5b7bf677e0","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uv","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uv","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vp88-798v-h67f","versionConstraint":">=0.23.44,<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-vp88-798v-h67f","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.3,"impactScore":1.5,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-vp88-798v-h67f","https://github.com/rustls/rustls/pull/3300","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/2bd5c0cefabb2c5fd4100383a736d59f9671b9b4","https://github.com/rustls/rustls/commit/4de14a508fbfa2273203ec17d9dfdd0fbd29e8d1","https://github.com/rustls/rustls/commit/7dcbe4c1ae12185237d22e9197583329630a2014","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0347.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vp88-798v-h67f","description":"rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert"},"relatedVulnerabilities":[]},{"artifact":{"id":"982e4b7937503896","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uvx","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uvx","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vp88-798v-h67f","versionConstraint":">=0.23.44,<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-vp88-798v-h67f","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.3,"impactScore":1.5,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-vp88-798v-h67f","https://github.com/rustls/rustls/pull/3300","https://github.com/rustls/rustls/pull/3354","https://github.com/rustls/rustls/commit/2bd5c0cefabb2c5fd4100383a736d59f9671b9b4","https://github.com/rustls/rustls/commit/4de14a508fbfa2273203ec17d9dfdd0fbd29e8d1","https://github.com/rustls/rustls/commit/7dcbe4c1ae12185237d22e9197583329630a2014","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0347.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vp88-798v-h67f","description":"rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert"},"relatedVulnerabilities":[]},{"artifact":{"id":"67434b5b7bf677e0","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uv","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uv","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w44r-93j7-qv28","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-w44r-93j7-qv28","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-w44r-93j7-qv28","https://github.com/rustls/rustls/pull/3355","https://github.com/rustls/rustls/commit/8fa0dc5d517a63411ad1e528249bdf5b098ae5e4","https://github.com/rustls/rustls/commit/f04804fa13341a9b1dc02b5d1dd8a746f2c4b7fb","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0349.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w44r-93j7-qv28","description":"rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share"},"relatedVulnerabilities":[]},{"artifact":{"id":"982e4b7937503896","cpes":["cpe:2.3:a:rustls_project:rustls:0.23.45:*:*:*:*:rust:*:*","cpe:2.3:a:rustls:rustls:0.23.45:*:*:*:*:rust:*:*"],"name":"rustls","purl":"pkg:cargo/rustls@0.23.45","type":"rust-crate","version":"0.23.45","language":"rust","licenses":[],"locations":[{"path":"/usr/local/bin/uvx","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/bin/uvx","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.23.46"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w44r-93j7-qv28","versionConstraint":"<0.23.46 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rustls","version":"0.23.45"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-w44r-93j7-qv28","fix":{"state":"fixed","versions":["0.23.46"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"0.23.46"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/rustls/rustls/security/advisories/GHSA-w44r-93j7-qv28","https://github.com/rustls/rustls/pull/3355","https://github.com/rustls/rustls/commit/8fa0dc5d517a63411ad1e528249bdf5b098ae5e4","https://github.com/rustls/rustls/commit/f04804fa13341a9b1dc02b5d1dd8a746f2c4b7fb","https://github.com/rustls/rustls/releases/tag/v/0.23.46","https://rustsec.org/advisories/RUSTSEC-2026-0349.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w44r-93j7-qv28","description":"rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share"},"relatedVulnerabilities":[]},{"artifact":{"id":"fe160cdb573a5ec7","cpes":["cpe:2.3:a:python:setuptools:84.0.0:*:*:*:*:*:*:*"],"name":"setuptools","purl":"pkg:pypi/setuptools@84.0.0","type":"python","version":"84.0.0","language":"python","licenses":["MIT"],"locations":[{"path":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/METADATA","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/RECORD","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/top_level.txt","layerID":"sha256:0903d658c983e990c59489f6e99ea933982e54333a1dcaea64611434f11004f3","accessPath":"/usr/local/lib/python3.15/site-packages/setuptools-84.0.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"84.1.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xmj3-9gf7-h52w","versionConstraint":">=38.2.2,<84.1.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"setuptools","version":"84.0.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-xmj3-9gf7-h52w","fix":{"state":"fixed","versions":["84.1.0"],"available":[{"date":"2026-10-24","kind":"first-observed","version":"84.1.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":1},"version":"4.0","vendorMetadata":{}}],"risk":0,"urls":["https://github.com/pypa/setuptools/security/advisories/GHSA-xmj3-9gf7-h52w","https://github.com/pypa/setuptools/pull/5329","https://github.com/pypa/setuptools/commit/6d07b8d17890dda58d944ac51e58f54af92d52af","https://github.com/pypa/setuptools/releases/tag/v84.1.0"],"severity":"Low","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xmj3-9gf7-h52w","description":"setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description"},"relatedVulnerabilities":[]}],"grade":"F","score":"0.00","as_of":"2026-11-10T12:52:33.133Z","grype_db_version":"2026-11-08T06:19:57.000Z"}