CVE-2026-125241

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the libavcodec/flicvideo.c component. The root cause is that the check_pixel_ptr() function only validates one bound when processing frames with a negative-stride . An attacker can exploit this by providing a crafted FLIC f...