CVE-2026-125245

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245 FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245

FFmpeg versions through 9.0.2 are vulnerable to a memory leak in the ff_mjpeg_decode_sof() function located in libavcodec/mjpegdec.c. The root cause is the overwriting of the hwaccel_picture_private pointer without properly freeing the previous memory allocation. An attacker can exploit this by s...

CVE-2026-125245: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which…

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125255: FFmpeg: FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger…

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2015-1872

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

CVE-2015-1872: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...