CVE-2026-125100

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the OpenEXR decoder specifically within the decode_frame() function in libavcodec/exr.c. The root cause is a miscalculation of the tiled block count . An attacker can provide a crafted tiled OpenEXR image with large dimensions...

EUVD-2026-120254

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

PT-2026-140993

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decode frame in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...