VulDB Recent Entries

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. The impacted element is the function tqi_decode_frame of the file libavcodec/eatqi.c of the component TQI Decoder. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2026-125070. The attack can only be executed locally. There is no exploit available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been classified as problematic. The affected element is the function decode_frame of the file libavcodec/bink.c of the component Bink Video Decoder. Performing a manipulation results in null pointer dereference. This vulnerability was named CVE-2026-125068. The attack needs to be approached locally. There is no available exploit.

A vulnerability was found in FFmpeg up to 9.0.2 and classified as problematic. Impacted is the function mp_decode_frame of the component Motion Pixels decoder. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-125069. Local access is required to approach this attack. No exploit exists.

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. This issue affects the function decode_frame of the file libavcodec/cljrdec.c. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2026-125066. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in FFmpeg up to 9.0.2. This vulnerability affects the function g726_decode_frame of the file libavcodec/g726.c of the component Decoder. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-125064. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as problematic, has been found in FFmpeg up to 9.0.2. This affects the function tgv_decode_inter of the file libavcodec/eatgv.c of the component libavcodec. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-125065. An attack has to be approached locally. There is no exploit available.

A vulnerability classified as problematic was found in FFmpeg up to 9.0.2. Affected by this issue is some unknown functionality of the file libavcodec/mscc.c of the component MSCC/SRGC decoder. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-125177. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is the function decode_mvc2 of the file libavcodec/mvcdec.c of the component libavcodec. Performing a manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-125190. The attack requires a local approach. No exploit exists.

A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. Affected is an unknown function of the file libavcodec/cscd.c of the component CamStudio decoder. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-125184. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as problematic has been reported in FFmpeg up to 9.0.2. This impacts the function h264_queue_frame of the component dts2pts bitstream filter. This manipulation causes resource consumption. This vulnerability is registered as CVE-2026-125186. The attack needs to be launched locally. No exploit is available.

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. This affects the function flashsv_decode_block of the file libavcodec/flashsv.c of the component FlashSV Decoder. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2026-125175. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as problematic has been detected in FFmpeg up to 9.0.2. The impacted element is the function vp8_lossy_decode_alpha of the file libavcodec/webp.c of the component WebP Decoder. The manipulation leads to uninitialized pointer. This vulnerability is listed as CVE-2026-125098. The attack must be carried out locally. There is no available exploit.

A vulnerability categorized as critical has been discovered in FFmpeg up to 9.0.2. The affected element is the function targa_decode_rle of the file libavcodec/targa.c of the component TGA Image Decoder. Executing a manipulation can lead to uninitialized pointer. This vulnerability is tracked as CVE-2026-125170. The attack can be launched remotely. No exploit exists.

A vulnerability was found in FFmpeg up to 9.0.2. It has been rated as problematic. Impacted is the function mpc7_decode_init of the component Musepack SV7 decoder. Performing a manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-125171. The attack is only possible with local access. There is not any exploit available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. This issue affects the function ff_mlz_decompression of the file libavcodec/mlz.c of the component MLZ Decompression. Such manipulation leads to use of uninitialized variable. This vulnerability is referenced as CVE-2026-125103. The attack can only be performed from a local environment. No exploit is available.

A vulnerability was found in FFmpeg up to 9.0.2. It has been classified as problematic. This vulnerability affects the function decode_frame of the file libavcodec/exr.c of the component OpenEXR decoder. This manipulation causes integer overflow. The identification of this vulnerability is CVE-2026-125100. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in FFmpeg up to 9.0.2 and classified as problematic. This affects an unknown part of the file libavcodec/vmnc.c of the component VMnc decoder. The manipulation results in information disclosure. This vulnerability was named CVE-2026-125101. The attack needs to be approached locally. There is no available exploit.

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. Affected by this issue is the function raw_decode of the file libavcodec/rawdec.c of the component Raw Decoder. The manipulation leads to uninitialized pointer. This vulnerability is uniquely identified as CVE-2026-125097. Local access is required to approach this attack. No exploit exists.

A vulnerability, which was classified as problematic, was found in FFmpeg up to 9.0.2. Affected by this vulnerability is the function decode_frame of the file libavcodec/c93.c of the component C93 video decoder. Executing a manipulation can lead to buffer overflow. This vulnerability is handled as CVE-2026-125095. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in FFmpeg up to 9.0.2. Affected is the function seq_decode_op1 of the file libavcodec/tiertexseqv.c of the component Tiertex SEQ Decoder. Performing a manipulation results in stack-based buffer overflow. This vulnerability is known as CVE-2026-125096. Attacking locally is a requirement. No exploit is available.