- CVE-2026-18295: fix out-of-bounds write in MRF atoms recovery parsing that could lead to remote code execution - CVE-2026-18296: fix heap-based buffer overflow in MRF atoms recovery parsing that could lead to remote code execution - CVE-2026-18298: drop gdkpixbufdec rank to NONE and fix output buffer pool not being reconfigured on format/resolution changes between frames - CVE-2026-18299: fix use-after-free in rtpsbcdepay RTP payload processing - CVE-2026-73433: fix integer underflow in avidemux FUJIFILM strd metadata parsing that could cause an out-of-bounds read/write - CVE-2026-73434: fix out-of-bounds read in avidemux vprp video field descriptor parsing caused by an incorrect divisor