Alertas de Seguridad de la Información

M Alto vulnerabilidad

28/06/2026

[CVE-2026-58049] FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at t…

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled ou…

nvdaltovulnerabilidad CVSS 8.6 NVD

G Alto vulnerabilidad

26/06/2026

[CVE-2026-46604] The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46601] The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas …

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46602] The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious o…

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-5305] The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin bef…

The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

24/06/2026

[CVE-2026-48793] Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument …

Jellyfin is an open source self hosted media server. Prior to 10.11.10, a potential FFmpeg argument injection vulnerability exists in the subtitle conversion code path. SubtitleEncoder.ConvertTextSubtitleToSrtInternal (SubtitleEncoder.cs, line 382) interpolates the subtitle file path into FFmpeg command-line arguments without calling EncodingUtils.NormalizePath(). On Linux, filenames can contain d…

nvdaltovulnerabilidad CVSS 8.8 NVD

F Alto vulnerabilidad

24/06/2026

[CVE-2026-54297] Faraday is an HTTP client library abstraction layer that provides a common interface over many adapt…

Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query strings without enforcing a maximum nesting depth. A crafted query string causes Faraday to build a deeply nested Ruby Hash structure. The intern…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

24/06/2026

[CVE-2026-53036] In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in c…

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in check_imm signed range check check_imm(bits, imm) is used in the arm64 BPF JIT to verify that a branch displacement (in arm64 instruction units) fits into the signed N-bit immediate field of a B, B.cond or CBZ/CBNZ encoding before it is handed to the encoder. The macro currently tests for (imm > 0 &…

nvdaltovulnerabilidad CVSS 7.8 NVD

I Alto vulnerabilidad

23/06/2026

[CVE-2026-56379] ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG deco…

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

22/06/2026

[CVE-2026-48109] MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, A vulnerability e…

MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes Lz4Block and Lz4BlockArray. The decoder implementation is based on a deprecated fast-decompression algorithm that does not take a source-length bound. A remote attacker can send a crafted MessagePack payload with mani…

nvdaltovulnerabilidad CVSS 8.2 NVD

S Alto vulnerabilidad

19/06/2026

[CVE-2026-49295] libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a craft…

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.20, a crafted H.265 bitstream can cause an out-of-bounds array write in `decoder_context::process_reference_picture_set()` (`libde265/decctx.cc:1376`). The root cause is a missing aggregate bound check on predicted short-term reference picture set entries. Individual list sizes are validated, but the combined …

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

19/06/2026

[CVE-2026-56208] A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A …

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An…

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

19/06/2026

[CVE-2026-56209] An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation…

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is full…

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

19/06/2026

[CVE-2026-56211] A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. I…

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic …

nvdaltovulnerabilidad CVSS 7.1 NVD

M Alto vulnerabilidad

18/06/2026

[CVE-2026-8461] An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV de…

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.

nvdaltovulnerabilidad CVSS 8.8 NVD

F Alto vulnerabilidad

17/06/2026

[CVE-2026-42530] NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is co…

NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers …

nvdaltovulnerabilidad CVSS 8.1 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0160] In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out o…

In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

16/06/2026

[CVE-2026-0148] In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due…

In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-53705] A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a special…

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation (4 * block_samples * channels) in gst_wavpack_dec_handle_frame() causes a very small heap allocation. The WavPack library then writes decoded audio samples far beyond the allocated buffer, resulting in heap memory corruption…

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

15/06/2026

[CVE-2026-52719] An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad.…

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causing downstream parsing to read beyond the provided input buffer, leading to a crash or potential informa…

nvdaltovulnerabilidad CVSS 7.1 NVD