CVE-2026-125207

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows attackers to exhaust memory via an attacker-controlled block size. Attackers can supply a crafted ACM file with maximum level and row count in extradata, making decodeinit alloca...

CVE-2026-125224 FFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid Extradata

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbisparser.c that re-parses invalid extradata for every packet when validextradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust CP...

PT-2026-141035

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows attackers to exhaust memory via an attacker-controlled block size. Attackers can supply a crafted ACM file with maximum level and row count in extradata, making decode init...

CVE-2026-125207: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows…

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows attackers to exhaust memory via an attacker-controlled block size. Attackers can supply a crafted ACM file with maximum level and row count in extradata, making decodeinit alloca...

OESA-2026-4147 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A memory corruption...

SUSE CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

CVE-2026-52297

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted MOV file is parsed due to insufficiently padded extradata. This vulnerability can lead to an application crash, resulting in a denial of service. Mitigation Do not parse untrusted files with the MOV demuxer in...

CVE-2026-52296

A flaw was found in FFmpeg. An out-of-bounds read can occur when a specially crafted file is encoded into the WMA Windows Media Audio format due to a missing required padding in extradata allocation. This issue can lead to an application crash, resulting in a denial of service. Mitigation Do not...

Astra Linux – Vulnerability in ffmpeg5

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, there is a potential security vulnerability due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...

Astra Linux – Vulnerability in ffmpeg

In FFmpeg 4.4, the adtsdecodeextradata function in libavformat/adtsenc.c does not check the return value of initgetbits. This is a necessary step, as the second argument of initgetbits can be manipulated...

EUVD-2026-77134

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

Linux Distros Unpatched Vulnerability : CVE-2026-52297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

Linux Distros Unpatched Vulnerability : CVE-2026-52296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. CVE-2026-52296 Note th...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of padding in the extradata allocation process within WMA encoding. An attacker can cause a denial of service by triggering an out-of-bounds read through specially crafted input data...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MOV parsing in movreadiacb due to insufficient padding of extradata. An attacker can cause a denial of service by triggering an out-of-bounds read when processing specially crafted MOV files. Remediation Upgrad...

DEBIAN-CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

UBUNTU-CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52296

FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...

CVE-2026-52297

FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...