FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc_frame() function in libavcodec/vvc/refs.c that undersizes the reference picture list allocation on 32-bit builds. Attackers can supply a crafted VVC (H.266) file with a very large number of NAL units per access unit to trigger heap out-of-bounds writes …

Blessures teisteren VVC Beernem A, waardoor de B-ploeg moet depanneren. De verstandhouding tussen de trainers Dimitri Delporte, Bart Hernou, Andres Ramandt en Kristof Marly is zo goed dat niemand daar een probleem van maakt. The post Blessures zetten VVC Beernem A voor...

Posted by Alexander A. Shvedov on Nov 09 Product: VVdeC (vvdecapp) Affected: Versions before 3.2.1 Reproduced build: 3.3.0-dev Commit e493ce51f13a2dea72cd58354652ed4e0f509a0e Fixed: 1eddb30c4b8e02f3d13ba24aa7e52f1aa7b08c01 CVE: CVE-2026-124307 CWE: CWE-416 (Use After Free) CVSS 3.1: 5.8 MEDIUM (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H) Reporter: Alexander A. Shvedov (@sigdevel) Description: A crafted VVC bitstream can redefine an ALF adaptation...

The `libavcodec` library now contains a native VVC (Versatile Video Coding) decoder, supporting a large subset of the codec's features. Further optimizations and support for more features are coming soon. The code was written by Nuo Mi, Xu Mu, Frank Plowman, Shaun Loo, and Wu Jianhua.

Posted by Alexander A. Shvedov on Nov 09 Product: VVdeC (vvdecapp) Affected: Versions through 3.2.1 Reproduced build: 3.3.0-dev Commit 76f087e5936336b951801576514c0fd42976b7eb Fixed: fb73aca37b48f89814f57edbc8072a37d47bbe06 CVE: CVE-2026-124311 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 5.5 MEDIUM (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Reporter: Alexander A. Shvedov (@sigdevel) Description: A crafted VVC bitstream switches to an SPS...

Voor de tweede wedstrijd in de poulefase van de VoetbalBrabant Cup moest #Trinitas op bezoek bij zaterdagclub NEO ’25, uitkomend in de derde klasse. Een tegenstander die voor onze club volledig onbekend was. De vereniging uit Sprang-Capelle promoveerde, net als Trinitas, via de nacompetitie. In de finale werd VVC ’68 met 3-2 verslagen. door André […]

Na drie verliesbeurten op rij, tegen respectievelijk Snaaskerke, Veldegem en Lichtervelde pakten de jongens van coach Dimitri Delporte een punt tegen Koksijde Oostduinkerke A. De groep rekent nu op bevestiging op de volgende speeldag in Aartrijke. The post Garon Van Loocke...

A new major release, FFmpeg 7.0 "Dijkstra", is now available for download. The most noteworthy changes for most users are a native VVC decoder (currently experimental, until more fuzzing is done), IAMF support, or a multi-threaded `ffmpeg` CLI tool. This release is _not_ backwards compatible, removing APIs deprecated before 6.0. The biggest change for most library callers will be the removal of the old bitmask-based channel layout API, replaced by the `AVChannelLayout` API allowing such features as custom channel ordering, or Ambisonics. Certain deprecated `ffmpeg` CLI options were also removed, and a C11-compliant compiler is now required to build the code. As usual, there is also a number of new supported formats and codecs, new filters, APIs, and countless smaller features and bugfixes. Compared to 6.1, the `git` repository contains almost ∼2000 new commits by ∼100 authors, touching >100000 lines in ∼2000 files — thanks to everyone who contributed. See the Changelog, APIchanges, and the git log for more comprehensive lists of changes.

A new major release, FFmpeg 8.0 "Huffman", is now available for download. Thanks to several delays, and modernization of our entire infrastructure, this release ended up being one of our largest releases to date. In short, its new features are: * Native decoders: APV, ProRes RAW, RealVideo 6.0, Sanyo LD-ADPCM, G.728 * VVC decoder improvements: IBC, ACT, Palette Mode * Vulkan compute-based codecs: FFv1 (encode and decode), ProRes RAW (decode only) * Hardware accelerated decoding: Vulkan VP9, VAAPI VVC, OpenHarmony H264/5 * Hardware accelerated encoding: Vulkan AV1, OpenHarmony H264/5 * Formats: MCC, G.728, Whip, APV * Filters: colordetect, pad_cuda, scale_d3d11, Whisper, and others A new class of decoders and encoders based on pure Vulkan compute implementation have been added. Vulkan is a cross-platform, open standard set of APIs that allows programs to use GPU hardware in various ways, from drawing on screen, to doing calculations, to decoding video via custom hardware accelerators. Rather than using a custom hardware accelerator present, these codecs are based on compute shaders, and work on any implementation of Vulkan 1.3. Decoders use the same hwaccel API and commands, so users do not need to do anything special to enable them, as enabling Vulkan decoding is sufficient to use them. Encoders, like our hardware accelerated encoders, require specifying a new encoder (ffv1_vulkan). Currently, the only codecs supported are: FFv1 (encoding and decoding) and ProRes RAW (decode only). ProRes (encode+decode) and VC-2 (encode+decode) implementations are complete and currently in review, to be merged soon and available with the next minor release. Only codecs specifically designed for parallelized decoding can be implemented in such a way, with more mainstream codecs not being planned for support. Depending on the hardware, these new codecs can provide very significant speedups, and open up possibilities to work with them for situations like non-linear video editors and lossless screen recording/streaming, so we are excited to learn what our downstream users can make with them. The project has recently started to modernize its infrastructure. Our mailing list servers have been fully upgraded, and we have recently started to accept contributions via a new forge, available on code.ffmpeg.org, running a Forgejo instance. As usual, we recommend that users, distributors, and system integrators to upgrade unless they use current git master.

KFC Damme zegevierde tegen een moedig strijdend VVC Beernem B en blijft op twee punten van leider Eendracht Brugge. We legden ons oor te luisteren bij Rune Wittevrongel, een vaste waarde in de defensie met een heel klare kijk op het spelletje. The post Rune Wittevrongel is...

FFmpeg 7.1 "Péter", a new major release, is now available! A full list of changes can be found in the release changelog. The more important highlights of the release are that the VVC decoder, merged as experimental in version 7.0, has had enough time to mature and be optimized enough to be declared as stable. The codec is starting to gain traction with broadcast standardization bodies. Support has been added for a native AAC USAC (part of the xHE-AAC coding system) decoder, with the format starting to be adopted by streaming websites, due to its extensive volume normalization metadata. MV-HEVC decoding is now supported. This is a stereoscopic coding tool that begun to be shipped and generated by recent phones and VR headsets. LC-EVC decoding, an enhancement metadata layer to attempt to improve the quality of codecs, is now supported via an external library. Support for Vulkan encoding, with H264 and HEVC was merged. This finally allows fully Vulkan-based decode-filter-encode pipelines, by having a sink for Vulkan frames, other than downloading or displaying them. The encoders have feature-parity with their VAAPI implementation counterparts. Khronos has announced that support for AV1 encoding is also coming soon to Vulkan, and FFmpeg is aiming to have day-one support. In addition to the above, this release has had a lot of important internal work done. By far, the standout internally are the improvements made for full-range images. Previously, color range data had two paths, no negotiation, and was unreliably forwarded to filters, encoders, muxers. Work on cleaning the system up started more than 10 years ago, however this stalled due to how fragile the system was, and that breaking behaviour would be unacceptable. The new system fixes this, so now color range is forwarded correctly and consistently everywhere needed, and also laid the path for more advanced forms of negotiation. Cropping metadata is now supported with Matroska and MP4 formats. This metadata is important not only for archival, but also with AV1, as hardware encoders require its signalling due to the codec not natively supporting one. As usual, we recommend that users, distributors, and system integrators to upgrade unless they use current git master.