VulDB Recent Entries

A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. Impacted is an unknown function of the file libavcodec/videotoolboxenc.c of the component VideoToolbox Encoder. The manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2026-125212. The attack must be initiated from a local position. There is no exploit available.

A vulnerability marked as problematic has been reported in FFmpeg up to 9.0.2. This issue affects the function encode_gbrp12 of the file libavcodec/dpxenc.c of the component DPX Encoder. The manipulation of the argument bits_per_raw_sample leads to null pointer dereference. This vulnerability is listed as CVE-2026-125216. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. This vulnerability affects the function ff_v4l2_m2m_codec_reinit of the file libavcodec/v4l2_buffers.c of the component V4L2 mem2mem decoder. Executing a manipulation can lead to deadlock. This vulnerability is tracked as CVE-2026-125191. The attack is restricted to local execution. No exploit exists.

A vulnerability identified as problematic has been detected in FFmpeg up to 9.0.2. This affects the function subimage_with_fill_template of the file libavcodec/proresenc_anatoliy.c of the component prores_aw encoder. Performing a manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-125188. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as problematic has been discovered in FFmpeg up to 9.0.2. Affected by this issue is the function cook_decode_init of the component Cook decoder. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-125182. The attack can only be performed from a local environment. No exploit is available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been rated as problematic. Affected by this vulnerability is the function lcevc_metadata_handle_vui of the component lcevc_metadata bitstream filter. This manipulation causes reachable assertion. The identification of this vulnerability is CVE-2026-125189. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. Affected is the function tta_encode_frame of the file libavcodec/ttaenc.c of the component TTA encoder. The manipulation results in reachable assertion. This vulnerability was named CVE-2026-125187. The attack needs to be approached locally. There is no available exploit.

A vulnerability was found in FFmpeg up to 9.0.2. It has been classified as problematic. This impacts the function pps_3d_extension of the file libavcodec/hevc/ps.c of the component HEVC Decoder. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2026-125183. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in FFmpeg up to 9.0.2 and classified as problematic. This affects the function ff_aom_parse_film_grain_sets of the component Film Grain Parser. Executing a manipulation can lead to divide by zero. This vulnerability is handled as CVE-2026-125185. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. The impacted element is the function flic_decode_frame_15_16BPP of the file libavcodec/flicvideo.c of the component FLIC Decoder. Performing a manipulation results in out-of-bounds write. This vulnerability is known as CVE-2026-125181. Attacking locally is a requirement. No exploit is available.

A vulnerability, which was classified as critical, was found in FFmpeg up to 9.0.2. The affected element is the function tdsc_load_cursor of the file libavcodec/tdsc.c of the component TDSC Decoder. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-125178. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in FFmpeg up to 9.0.2. Impacted is the function libxevd_receive_frame of the file libavcodec/libxevd.c of the component libxevd. This manipulation causes out-of-bounds read. This vulnerability appears as CVE-2026-125172. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic was found in FFmpeg up to 9.0.2. This issue affects some unknown processing of the file libavcodec/exif.c of the component Exif Parser. The manipulation results in uncontrolled memory allocation. This vulnerability is reported as CVE-2026-125180. The attack requires a local approach. No exploit exists.

A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. This vulnerability affects the function decode_hybrid of the file libavcodec/flashsv.c of the component Flash Screen Video Decoder. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-125176. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. This affects the function libxevd_receive_frame of the file libavcodec/libxevd.c of the component EVC Handler. Executing a manipulation can lead to memory leak. This vulnerability is registered as CVE-2026-125173. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as problematic has been reported in FFmpeg up to 8.1.2/9.0.1. Affected by this issue is the function ff_hap_set_chunk_count of the file libavcodec/hap.c of the component Hap Decoder. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-125174. The attack must be initiated from a local position. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is the function bit_allocation of the file libavcodec/imc.c of the component libavcodec. Such manipulation leads to infinite loop. This vulnerability is listed as CVE-2026-125073. The attack must be carried out locally. There is no available exploit.

A vulnerability identified as problematic has been detected in FFmpeg up to 9.0.2. Affected is the function decode_frame of the file libavcodec/jvdec.c of the component JV Video Decoder. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-2026-125071. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as problematic has been discovered in FFmpeg up to 9.0.2. This impacts the function mp_decode_frame of the file libavcodec/mpegaudiodec_template.c of the component Mp3adu Decoder. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-125072. The attack is only possible with local access. There is not any exploit available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been rated as problematic. This affects the function vble_decode_frame of the file libavcodec/vble.c of the component VBLE Decoder. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2026-125067. The attack can only be performed from a local environment. No exploit is available.