CVE-2026-125253

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the cbs_vp9_split_fragment() function located in libavcodec/cbs_vp9.c. On 32-bit builds , the overflow occurs during the superframe size check. An attacker can exploit this by providing a crafted VP9 packet with a forged super...

ffmpeg:ffmpeg_BSF_VP9_METADATA_fuzzer: Use-of-uninitialized-value in cbs_vp9_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6339363208757248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFVP9METADATAfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...