Linux Distros Unpatched Vulnerability : CVE-2026-125256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative...

UBUNTU-CVE-2026-125256

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125256

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125229

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125256

FFmpeg versions through 9.0.2 are susceptible to a heap buffer overflow vulnerability in the ff_llvidenc_diff_bytes_rvv() function. This flaw occurs within the Huffyuv encoder on RVV-enabled RISC-V builds when transcoding RGB video narrower than 8 or 16 pixels. Specifically, the vulnerability is ...

CVE-2026-125256 FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

EUVD-2026-120206

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125256 FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125256 FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125229

FFmpeg versions through 9.0.2 are vulnerable to an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec/huffyuvenc.c. The root cause is that encode_init() fails to validate minimum frame dimensions for the median predictor. An attacker can provide a very small vi...

CVE-2026-125229

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125229 FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125229 FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

PT-2026-141057

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode frame function of libavcodec/huffyuvenc.c, because encode init never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall...

CVE-2026-125256: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_llvidenc_diff_bytes_rvv() that allows…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ffllvidencdiffbytesrvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on RVV-enabled...

CVE-2026-125229: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of…

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

PT-2026-141084

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff llvidenc diff bytes rvv that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. Attackers can supply RGB video narrower than 8 or 16 pixels for huffyuv transcoding on...

SUSE CVE-2026-120247

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decodeslice t...

CVE-2026-120247

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decodeslice t...

CVE-2026-120247

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short packed-BGR bitstreams. Attackers can craft a Huffyuv BGR24/BGRA video whose entropy data ends early, causing decodeslice t...