CVE-2026-125104

A flaw was found in FFmpeg. A memory exhaustion issue can occur in the APE Monkey's Audio decoder when decoding specially crafted legacy APE audio files due to a failure to enforce the sample limit on frame sizes. This vulnerability can lead to an excessive consumption of memory resources,...

CVE-2026-125104 FFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.c

FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in apedecodeframe in libavcodec/apedec.c that fails to enforce the 73728-sample limit for legacy APE frames. Attackers can supply a crafted legacy Monkey's Audio file declaring an enormous nblocks value to force gigabyte-scale...

Debian DSA-3957-1 : ffmpeg - security update

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. These issues could lead to Denial-of-Service and, in some situation, the execution of arbitrary code. - CVE-2017-9608 Yihan Lian of Qihoo 360 GearTeam discovered a NULL pointer access when parsing a...

UBUNTU-CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...