CVE-2026-125208

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...