CVE-2026-125226 FFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen Demuxer

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbgreadheader in libavformat/sbgdec.c that derives an unbounded default frame size from the script's sample rate. Attackers can supply a crafted SBaGen script declaring a very high -r sample rate so the wavesynth...

CVE-2026-125226

FFmpeg versions through 9.0.2 are vulnerable to an uncontrolled memory allocation vulnerability in the sbg_read_header() function located in libavformat/sbgdec.c. The root cause is that the wavesynth decoder derives an unbounded default frame size from the script's sample rate. An attacker can pr...

CVE-2026-125226 FFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen Demuxer

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbgreadheader in libavformat/sbgdec.c that derives an unbounded default frame size from the script's sample rate. Attackers can supply a crafted SBaGen script declaring a very high -r sample rate so the wavesynth...