https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T12:16:09.505303+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-107677 fkie_cve-2026-107677 2026-10-10T12:16:09.581171+00:00

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.

 https://vulnerability.circl.lu/vuln/ghsa-23w5-87r9-849m GHSA-23w5-87r9-849m 2026-10-10T12:16:09.581288+00:00

FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.