CVE-2026-125208

FFmpeg versions through 9.0.2 are affected by an out-of-bounds write vulnerability in the v4l2_buffer_swframe_to_buf() function located in libavcodec/v4l2_buffers.c. The root cause is a failure to check cumulative plane offsets against the V4L2 buffer length . Attackers can provide crafted video ...