CVE-2026-125232

FFmpeg through 9.0.2 contains a division by zero vulnerability in estimatemotionb in libavcodec/motionest.c, caused by frame timestamp distances truncated to 16 bits. Attackers can supply input with timestamp gaps that are multiples of 65536, crashing MPEG-4 Part 2 or MPEG-1/2 B-frame encoding wi...

CVE-2026-125232

FFmpeg versions through 9.0.2 are vulnerable to a division by zero vulnerability within the estimate_motion_b() function in libavcodec/motion_est.c. The root cause is that frame timestamp distances are truncated to 16 bits; specifically, an attacker can provide input with timestamp gaps that are ...

CVE-2026-125232 FFmpeg through 9.0.2 Division by Zero in B-frame Motion Estimation

FFmpeg through 9.0.2 contains a division by zero vulnerability in estimatemotionb in libavcodec/motionest.c, caused by frame timestamp distances truncated to 16 bits. Attackers can supply input with timestamp gaps that are multiples of 65536, crashing MPEG-4 Part 2 or MPEG-1/2 B-frame encoding wi...