CVE-2026-125229

FFmpeg versions through 9.0.2 are vulnerable to an out-of-bounds memory access in the encode_frame() function within libavcodec/huffyuvenc.c. The root cause is that encode_init() fails to validate minimum frame dimensions for the median predictor. By supplying a tiny video (e.g., 2 pixels wide or...