VulDB Recent Entries

A vulnerability was found in FFmpeg up to 8.1.2/9.0.1 and classified as critical. This vulnerability affects the function cook_decode_frame of the file libavcodec/cook.c of the component Cook Multichannel Decoder. Such manipulation leads to heap-based buffer overflow. This vulnerability is traded as CVE-2026-125203. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. This affects the function libx265_encode_frame of the file libavcodec/libx265.c of the component libx265. This manipulation causes memory leak. This vulnerability appears as CVE-2026-125200. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in FFmpeg up to 9.0.2. Affected by this issue is the function vaapi_hevc_start_frame of the file libavcodec/vaapi_hevc.c of the component VAAPI HEVC Handler. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-125202. The attack requires a local approach. No exploit exists.

A vulnerability, which was classified as problematic, has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is an unknown functionality of the file libavcodec/dxa.c of the component DXA decoder. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-125192. The attack needs to be performed locally. There is not any exploit available.

A vulnerability classified as problematic was found in FFmpeg up to 9.0.2. Affected is the function old_codec23 of the file libavcodec/sanm.c of the component SANM Decoder. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is registered as CVE-2026-125266. The attack needs to be launched locally. No exploit is available.

A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. This impacts an unknown function of the file libavcodec/cfhd.c of the component CineForm HD decoder. Performing a manipulation results in uninitialized pointer. This vulnerability is cataloged as CVE-2026-125268. The attack must be initiated from a local position. There is no exploit available.

A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. This affects the function parse_frame_header of the file libavcodec/jpegxl_parser.c of the component libavcodec. Such manipulation leads to resource consumption. This vulnerability is listed as CVE-2026-125264. The attack must be carried out locally. There is no available exploit.

A vulnerability marked as problematic has been reported in FFmpeg up to 9.0.2. The impacted element is the function get_buffer2 of the file libavcodec/decode.c of the component Decode. This manipulation causes allocation of resources. This vulnerability is tracked as CVE-2026-125263. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. The affected element is the function ff_prores_kostya_encode_init of the component ProRes Encoder. The manipulation results in integer overflow. This vulnerability is identified as CVE-2026-125259. The attack is only possible with local access. There is not any exploit available.

A vulnerability identified as problematic has been detected in FFmpeg up to 9.0.2. Impacted is the function ff_llvidenc_diff_bytes_rvv of the component Huffyuv encoder. The manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-2026-125256. The attack can only be performed from a local environment. No exploit is available.

A vulnerability categorized as problematic has been discovered in FFmpeg up to 9.0.2. This issue affects the function ff_dovi_rpu_generate of the file libavcodec/dovi_rpuenc.c of the component Dolby Vision RPU Encoder. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2026-125215. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in FFmpeg up to 8.1.2/9.0.1. It has been rated as critical. This vulnerability affects the function vk_av1_decode_slice of the file libavcodec/vulkan_av1.c of the component Vulkan AV1 Decoder. Performing a manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-125201. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. This affects the function decode_rle of the file libavcodec/psd.c of the component PSD Decoder. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-125213. Local access is required to approach this attack. No exploit exists.

A vulnerability was found in FFmpeg up to 9.0.2. It has been classified as problematic. Affected by this issue is some unknown functionality of the component av1_frame_merge bitstream filter. This manipulation causes denial of service. This vulnerability is handled as CVE-2026-125205. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in FFmpeg up to 9.0.2 and classified as problematic. Affected by this vulnerability is the function aribcaption_trans_ass_subtitle of the file libavcodec/libaribcaption.c of the component ARIB Caption Handler. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-125211. Attacking locally is a requirement. No exploit is available.

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. Affected is the function vc1_decode_frame of the file libavcodec/vc1dec.c of the component VC-1 Decoder. The manipulation leads to memory leak. This vulnerability is traded as CVE-2026-125199. An attack has to be approached locally. There is no exploit available.

A vulnerability, which was classified as problematic, was found in FFmpeg up to 9.0.2. This impacts the function adpcm_encode_frame of the file libavcodec/adpcmenc.c of the component Audio Encoding. Executing a manipulation can lead to uninitialized pointer. This vulnerability appears as CVE-2026-125195. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as problematic, has been found in FFmpeg up to 9.0.2. This affects the function mediaformat_jni_setBuffer of the file libavcodec/mediacodec_wrapper.c of the component MediaCodec Wrapper. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-125198. The attack requires a local approach. No exploit exists.

A vulnerability classified as problematic was found in FFmpeg up to 9.0.2. The impacted element is an unknown function of the file libavcodec/gemdec.c of the component GEM raster image decoder. Such manipulation leads to uninitialized pointer. This vulnerability is documented as CVE-2026-125099. The attack needs to be performed locally. There is not any exploit available.

A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. The affected element is an unknown function of the file libavcodec/vaapi_decode.c of the component VAAPI Decode. This manipulation causes memory leak. This vulnerability is registered as CVE-2026-125252. The attack needs to be launched locally. No exploit is available.