CVE-2026-125221

FFmpeg versions through 9.0.2 are vulnerable to an uncontrolled recursion vulnerability within the score_header() function in libavcodec/flac_parser.c. An attacker can provide a crafted FLAC input containing numerous small, valid-looking frame headers to trigger deep recursion. This results in th...