CVE-2026-125229

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...