Linux Distros Unpatched Vulnerability : CVE-2026-125221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stac...

UBUNTU-CVE-2026-125221

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CVE-2026-125221

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CVE-2026-125221

The software FFmpeg (versions through 9.0.2 ) is vulnerable to an uncontrolled recursion vulnerability within the score_header() function in libavcodec/flac_parser.c . An attacker can trigger this by providing a crafted FLAC input containing numerous small, valid-looking frame headers. This force...

CVE-2026-125221 FFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header()

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

EUVD-2026-120310

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CVE-2026-125221 FFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header()

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CVE-2026-125221: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score_header() in libavcodec/flac_parser.c…

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in scoreheader in libavcodec/flacparser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

PT-2026-141049

FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score header in libavcodec/flac parser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion...

CLEANSTART-2023-PK70836 TagLib::Ogg::FLAC::File::scan function in oggflacfile

Security vulnerability affects the taglib package. The TagLib::Ogg::FLAC::File::scan function in oggflacfile...

CLEANSTART-2024-WV84734 In append_to_verify_fifo_interleaved_ of stream_encoder

Security vulnerability affects the flac package. In appendtoverifyfifointerleaved of streamencoder...

CLEANSTART-2026-DX27780 flac_buffer_copy function in flac

Security vulnerability affects the libsndfile package. The flacbuffercopy function in flac...

CLEANSTART-2026-ZF21543 flac_buffer_copy function in flac

Security vulnerability affects the libsndfile package. The flacbuffercopy function in flac...

CLEANSTART-2026-EB74648 flac_buffer_copy function in flac

Security vulnerability affects the libsndfile package. The flacbuffercopy function in flac...

Astra Linux – vulnerability in gst-plugins-good1.0

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability enables remote attackers to execute arbitrary code on affected installations of GStreamer. Exploitation requires interaction with this library; however, the attack vectors may vary depending on th...

CLEANSTART-2026-GT68103 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-good package. GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability...

PT-2026-122301

Security vulnerability affects the gst-plugins-good package. GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability...

CVE-2026-109226

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

CVE-2026-109226 SGLang through 0.5.21 Audio Decompression Amplification via load_audio

SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audioda...

Rocky Linux 8.6 [CIQ] Security Update: flac / flac-libs Multiple Vulnerabilities (ciqsa-2026_1598)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261598 advisory. This advisory aggregates security fixes for the flac SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2014-8962, CVE-2014-9028, CVE-2017-6888. Tenable has...