6 matches found
CVE-2026-125246
FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...
CVE-2026-125246 FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment
FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...
CVE-2026-125246 FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment
FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...
EUVD-2026-120196
FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...
CVE-2026-125246
FFmpeg versions through 9.0.2 are vulnerable to a Denial of Service (DoS) condition in the cbs_jpeg_assemble_fragment() function. The root cause is a miscount of 0xff stuffing bytes within JPEG scan headers . An attacker can exploit this by providing a crafted JPEG/MJPEG stream containing 0xff in...
CVE-2026-125246: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in cbs_jpeg_assemble_fragment() that miscounts 0xff…
FFmpeg through 9.0.2 contains a denial of service vulnerability in cbsjpegassemblefragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an avassert0 abort when CBS-based bitstream filters process...