CVE-2026-125187

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

CVE-2026-125187 FFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame()

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

EUVD-2026-120276

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

CVE-2026-125187

Versions of FFmpeg through 9.0.2 are affected by a reachable assertion vulnerability in the TTA encoder 's tta_encode_frame() function located in libavcodec/ttaenc.c. The root cause is that the encoder fails to reserve sufficient output packet space for the 4-byte CRC . An attacker can trigger th...

CVE-2026-125187 FFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame()

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

CVE-2026-125187: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta_encode_frame() in…

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's ttaencodeframe in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...

PT-2026-141015

FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta encode frame in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. Attackers can supply audio whose sample values and length produce a small, poorly compressible final frame,...