CVE-2026-125252

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapidecode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking ...

CVE-2026-125245

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125252

FFmpeg versions through 9.0.2 are affected by a memory leak vulnerability in libavcodec/vaapi_decode.c . An attacker can exhaust system memory by providing streams with slice parse errors, specifically by crafting H.264 or other VAAPI-decoded videos where subsequent slices fail to parse on every ...

CVE-2026-125252 FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture Buffers

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapidecode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking ...

EUVD-2026-120202

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapidecode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking ...

CVE-2026-125252 FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture Buffers

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapidecode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking ...

CVE-2026-125245 FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

EUVD-2026-120195

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245 FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245

FFmpeg versions through 9.0.2 are vulnerable to a memory leak in the ff_mjpeg_decode_sof() function located in libavcodec/mjpegdec.c. The root cause is the overwriting of the hwaccel_picture_private pointer without properly freeing the previous memory allocation. An attacker can exploit this by s...

CVE-2026-125202 FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile Arrays

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

PT-2026-141080

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi decode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking...

CVE-2026-125245: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which…

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

PT-2026-141073

FFmpeg through 9.0.2 contains a memory leak vulnerability in ff mjpeg decode sof in libavcodec/mjpegdec.c, which overwrites the hwaccel picture private pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data a...

CVE-2026-125202: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

PT-2026-141030

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi hevc start frame in libavcodec/vaapi hevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values...

CVE-2026-125252: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi_decode.c that allows attackers to exhaust…

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapidecode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking ...

[SECURITY] Fedora 45 Update: obs-studio-plugin-vaapi-0.4.2-7.fc45

GStreamer based VAAPI encoder implementation. Taken out of the GStreamer OBS plugin as a standalone plugin. Simply because the FFMPEG VAAPI implementation shows performance bottlenecks on some AMD hardware. Supports H.264, H.265 and AV1...

Fedora: Security Advisory (FEDORA-2026-e77ad9d792)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2024-43899

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...