CVE-2026-125250

FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gifimagewriteimage in libavcodec/gif.c because shrunkbuf is sized from the first frame's linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, causing remapframetopalette to write past shrunkbuf a...