CVE-2026-125073

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

EUVD-2026-120248

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125073

FFmpeg versions through 9.0.2 are susceptible to an infinite loop vulnerability located in the bit_allocation() function within libavcodec/imc.c. An attacker can trigger this by providing audio blocks with a negative bit budget , which drives the freebits value negative. This causes the reduction...

CVE-2026-125073 FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC Decoder

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125073: FFmpeg: FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows…

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...