SUSE CVE-2026-125100

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

Linux Distros Unpatched Vulnerability : CVE-2026-125066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak CLJR decoder in libavcodec/cljrdec.c because decodeframe...

Linux Distros Unpatched Vulnerability : CVE-2026-125100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block coun...

Linux Distros Unpatched Vulnerability : CVE-2026-125197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZL...

CVE-2026-125100

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

UBUNTU-CVE-2026-125100

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

CVE-2026-125100

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

CVE-2026-125068

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decodeframe in libavcodec/bink.c ignores initgetbits failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for...

CVE-2026-125066

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak CLJR decoder in libavcodec/cljrdec.c because decodeframe ignores initgetbits failure. Attackers can supply a crafted AVI file with a 2^28-byte CLJR frame that overflows the bit count, causing reads...

CVE-2026-125197 FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread Decoding

FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...

CVE-2026-125100 FFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile Count

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

EUVD-2026-120254

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

CVE-2026-125100 FFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile Count

FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decodeframe in libavcodec/exr.c that miscalculates the tiled block count. Attackers can supply a crafted tiled OpenEXR image with large dimensions and small tiles to skip decoding and disclose uninitialized...

CVE-2026-125100

Versions of FFmpeg through 9.0.2 are vulnerable to an integer overflow in the OpenEXR decoder . The flaw exists within the decode_frame() function in libavcodec/exr.c , where the software miscalculates the tiled block count . An attacker can exploit this by providing a crafted tiled OpenEXR image...

CVE-2026-125095 FFmpeg through 9.0.2 C93 Decoder Uninitialized Stack Memory Disclosure

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c, where decodeframe never checks how many color table bytes were copied. Attackers can supply a crafted truncated Interplay C93 file so drawncolor writes uninitialized stack bytes...

CVE-2026-125095 FFmpeg through 9.0.2 C93 Decoder Uninitialized Stack Memory Disclosure

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c, where decodeframe never checks how many color table bytes were copied. Attackers can supply a crafted truncated Interplay C93 file so drawncolor writes uninitialized stack bytes...

CVE-2026-125068 FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video Decoder

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decodeframe in libavcodec/bink.c ignores initgetbits failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for...

CVE-2026-125068

Versions of FFmpeg through 9.0.2 are affected by a NULL pointer dereference vulnerability within the Bink video decoder . The issue occurs because the decode_frame() function in libavcodec/bink.c fails to handle errors returned by init_get_bits(). An attacker can exploit this by providing a craft...

CVE-2026-125068 FFmpeg through 9.0.2 NULL Pointer Dereference in Bink Video Decoder

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decodeframe in libavcodec/bink.c ignores initgetbits failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for...

CVE-2026-125066 FFmpeg through 9.0.2 NULL Pointer Dereference in CLJR Video Decoder

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak CLJR decoder in libavcodec/cljrdec.c because decodeframe ignores initgetbits failure. Attackers can supply a crafted AVI file with a 2^28-byte CLJR frame that overflows the bit count, causing reads...