Debian vulnerabilities

Latest Debian CVEs

Newest publication first · page 19 of 40 · showing the latest 1,000

1. CVE-2026-125205 FFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream Filter

   Published 2026-11-09

   Medium·CVSS 6.8 EPSS 0.17%

   FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1_frame_merge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. Attackers can supply a crafted .obu file opened by the AV1 OBU or Annex B demuxers...

2. CVE-2026-125203 FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow in Cook Multichannel Decoder

   Published 2026-11-09

   High·CVSS 8.5 EPSS 0.14%

   FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the Cook multichannel decoder in libavcodec/cook.c that fails to verify subpacket channel masks are disjoint. Attackers can supply a crafted RealMedia Cook stream with overlapping subpacket...

3. CVE-2026-125204 FFmpeg through 9.0.2 Heap Buffer Overflow in libwebp Encoder Conditional Replenishment

   Published 2026-11-09

   High·CVSS 7.3 EPSS 0.14%

   FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpenc_common.c that lets attackers corrupt memory when cr_threshold is set. Attackers can supply crafted media that increases resolution mid-stream, causing memcpy() to write pixel data past th...

4. CVE-2026-125202 FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile Arrays

   Published 2026-11-09

   High·CVSS 7.3 EPSS 0.14%

   FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in libavcodec/vaapi_hevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write contr...

5. CVE-2026-125174 FFmpeg before 8.1.3 and 9.x before 9.0.2 NULL Pointer Dereference via ff_hap_set_chunk_count()

   Published 2026-11-09

   Medium·CVSS 6.8 EPSS 0.18%

   FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a NULL pointer dereference vulnerability in ff_hap_set_chunk_count() in libavcodec/hap.c, where a shadowed return variable masks reallocation failures. Attackers can supply a crafted Hap video frame with an oversized chunk count s...

6. CVE-2026-125175 FFmpeg through 9.0.2 Information Disclosure via Flash Screen Video Decoder

   Published 2026-11-09

   Medium·CVSS 4.8 EPSS 0.13%

   FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv_decode_block() in libavcodec/flashsv.c that copies uninitialized heap memory into decoded frames when inflate output is short. Attackers can supply a crafted FLV with an FSV1 stream whose zlib block...

7. CVE-2026-125173 FFmpeg through 9.0.2 Memory Leak in libxevd EVC Decoder Wrapper

   Published 2026-11-09

   Medium·CVSS 6.8 EPSS 0.17%

   FFmpeg through 9.0.2 contains a memory leak vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails to free pkt_au when an access unit produces no picture. Attackers can supply a crafted EVC stream with many access units containing only parameter sets or non-f...

8. CVE-2026-125172 FFmpeg through 9.0.2 Out-of-Bounds Read via libxevd EVC NAL Length

   Published 2026-11-09

   Medium·CVSS 6.9 EPSS 0.13%

   FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails to validate NAL unit length prefixes against remaining packet data. Attackers can supply crafted EVC media with oversized 4-byte NAL length prefixes, ca...

9. CVE-2026-125171 FFmpeg through 9.0.2 Out-of-Bounds Read in Musepack SV7 Decoder via mpc7.c

   Published 2026-11-09

   Medium·CVSS 6.9 EPSS 0.13%

   FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Musepack SV7 decoder because mpc7_decode_init() does not validate lastframelen against MPC_FRAME_SIZE. Attackers can supply a crafted Musepack SV7 file declaring an oversized final frame, causing consumers o...

10. CVE-2026-125170 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via targa_decode_rle()

    Published 2026-11-09

    Medium·CVSS 4.8 EPSS 0.13%

    FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa_decode_rle() in libavcodec/targa.c caused by missing packet length checks. Attackers can supply truncated RLE-compressed TGA images so decoded frames contain leftover heap buffer data and repl...

11. CVE-2026-125104 FFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.c

    Published 2026-11-09

    Medium·CVSS 6.8 EPSS 0.17%

    FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in ape_decode_frame() in libavcodec/apedec.c that fails to enforce the 73728-sample limit for legacy APE frames. Attackers can supply a crafted legacy Monkey's Audio file declaring an enormous nblocks value to force...

12. CVE-2026-125103 FFmpeg through 9.0.2 Uninitialized Heap Disclosure via MLZ Decompressor in ALS Decoder

    Published 2026-11-09

    Medium·CVSS 4.8 EPSS 0.13%

    FFmpeg through 9.0.2 contains an information disclosure vulnerability in ff_mlz_decompression() in libavcodec/mlz.c, which accepts string codes beyond the dictionary's next free code. Attackers can supply a crafted MPEG-4 ALS file with malformed initial or out-of-range codes to c...

13. CVE-2026-125101 FFmpeg through 9.0.2 VMnc Decoder Uninitialized Heap Memory Disclosure

    Published 2026-11-09

    Medium·CVSS 4.8 EPSS 0.13%

    FFmpeg through 9.0.2 contains an information disclosure vulnerability in the VMnc decoder in libavcodec/vmnc.c that restores an unwritten cursor save area into later frames. Attackers can supply a crafted VMnc stream where a frame fails after loading a cursor shape, causing unini...

14. CVE-2026-125102 FFmpeg through 9.0.2 TAK Decoder Uninitialized Memory Disclosure via takdec.c

    Published 2026-11-09

    Medium·CVSS 4.8 EPSS 0.13%

    FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in tak_decode_frame() in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the li...

15. CVE-2026-125100 FFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile Count

    Published 2026-11-09

    Medium·CVSS 4.8 EPSS 0.13%

    FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decode_frame() in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disc...

16. CVE-2026-125073 FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC Decoder

    Published 2026-11-09

    Medium·CVSS 6.8 EPSS 0.17%

    FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the r...

17. CVE-2026-125072 FFmpeg through 9.0.2 NULL Pointer Dereference in MPEG Audio Decoder

    Published 2026-11-09

    Medium·CVSS 5.7 EPSS 0.17%

    FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame() in libavcodec/mpegaudiodec_template.c because init_get_bits() failure is ignored after a signed integer overflow. Attackers can pass an oversized packet to the mp3adu decoder through the l...

18. CVE-2026-125071 FFmpeg through 9.0.2 NULL Pointer Dereference in JV Video Decoder

    Published 2026-11-09

    Medium·CVSS 5.7 EPSS 0.17%

    FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/jvdec.c that allows attackers to crash applications by supplying oversized JV video packets. Attackers can pass a roughly 268435460-byte packet through the libavcodec API, overflowing the bit cou...

19. CVE-2026-125070 FFmpeg through 9.0.2 NULL Pointer Dereference in EA TQI Decoder

    Published 2026-11-09

    Medium·CVSS 6.8 EPSS 0.18%

    FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqi_decode_frame() in libavcodec/eatqi.c, which ignores init_get_bits() failure after an integer overflow. Attackers can supply a crafted EA file with a pIQT chunk carrying a 2^28-byte payload to crash the...

20. CVE-2026-125069 FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels Decoder

    Published 2026-11-09

    Medium·CVSS 5.7 EPSS 0.17%

    FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mp_decode_frame() ignores init_get_bits() failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NU...

21. CVE-2026-125068 FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video Decoder

    Published 2026-11-09

    Medium·CVSS 6.8 EPSS 0.18%

    FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decode_frame() in libavcodec/bink.c ignores init_get_bits() failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and c...

22. CVE-2026-112314 Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries

    Published 2026-11-09

    High·CVSS 7.5 EPSS 1.2%

    clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggeri...

23. CVE-2026-112321 Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths

    Published 2026-11-09

    High·CVSS 7.5 EPSS 1.2%

    The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger a...

24. CVE-2026-112320 Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching

    Published 2026-11-09

    High·CVSS 7.5 EPSS 0.98%

    The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a deni...

25. CVE-2026-112319 Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation

    Published 2026-11-09

    Medium·CVSS 6.5 EPSS 0.99%

    The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.