6 matches found
CVE-2026-125265
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...
EUVD-2026-120215
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...
CVE-2026-125265 FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...
CVE-2026-125265
FFmpeg versions through 9.0.2 are affected by a use-after-free vulnerability in the libavcodec/nvdec.c component. The issue stems from ff_nvdec_start_frame() failing to reset ctx->bitstream following slice errors. An attacker can provide a crafted video that abandons a picture before the end_f...
CVE-2026-125265 FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...
CVE-2026-125265: FFmpeg: FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails…
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...