CVE-2026-125247

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the dng_decode_tiles() function. By providing crafted DNG tile dimensions where TileWidth or TileLength are set near INT_MAX , an attacker can cause the tile loop to never execute. This results in the output of a frame that ex...

EUVD-2026-120197

FFmpeg through 9.0.2 contains an integer overflow vulnerability in dngdecodetiles that allows attackers to leak uninitialized memory via crafted DNG tile dimensions. Attackers can set TileWidth or TileLength near INTMAX so the tile loop never runs, outputting a frame exposing uninitialized or sta...