CVE-2026-125229

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Heap-buffer-overflow in encode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5703668010647552 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6090000002...