CVE-2026-125229 FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

CVE-2026-125229: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of…

FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encodeframe function of libavcodec/huffyuvenc.c, because encodeinit never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall fram...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...