CVE-2026-125246

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...

CVE-2026-125237

FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves dpx-hwaccelpictureprivate allocated when Vulkan hwaccel callbacks fail. Attackers can supply crafted DPX images that make startframe, decodeslice or endframe fail, triggering an avassert0 abort on...

EUVD-2026-120196

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...

CVE-2026-125246 FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...

CVE-2026-125246

FFmpeg versions through 9.0.2 are vulnerable to a Denial of Service (DoS) condition in the cbs_jpeg_assemble_fragment() function. The root cause is a miscount of 0xff stuffing bytes within JPEG scan headers . An attacker can exploit this by providing a crafted JPEG/MJPEG stream containing 0xff in...

EUVD-2026-120187

FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves dpx-hwaccelpictureprivate allocated when Vulkan hwaccel callbacks fail. Attackers can supply crafted DPX images that make startframe, decodeslice or endframe fail, triggering an avassert0 abort on...