CVE-2026-125249

FFmpeg 7.1 through 9.0.2 contains an integer overflow in ffvkdecodeaddslice in libavcodec/vulkandecode.c that miscalculates the Vulkan hwaccel bitstream buffer size. Attackers can supply a crafted stream with over 2 GiB of slice data per frame, causing memcpy to write past a smaller pooled...