CVE-2026-125233

A flaw was found in FFmpeg. A heap buffer overflow can occur in the DVB subtitle encoder when transcoding a specially crafted media file containing many bitmap subtitle rectangles due to undercounting the CLUT Color Look-Up Table segment headers. This vulnerability can lead to memory corruption,...

CVE-2026-125233 FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsubencode in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output...

CVE-2026-125233 FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsubencode in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output...