CVE-2026-125224: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis_parser.c that re-parses invalid…

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbisparser.c that re-parses invalid extradata for every packet when validextradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust CP...

PT-2026-141052

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis parser.c that re-parses invalid extradata for every packet when valid extradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust...