CVE-2026-125205

FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1framemerge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. Attackers can supply a crafted .obu file opened by the AV1 OBU or Annex B demuxers, forcing unlimited...

EUVD-2026-120294

FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1framemerge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. Attackers can supply a crafted .obu file opened by the AV1 OBU or Annex B demuxers, forcing unlimited...

PT-2026-141033

FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1 frame merge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. Attackers can supply a crafted .obu file opened by the AV1 OBU or Annex B demuxers, forcing unlimit...