CVE-2026-125206 FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha Encoding

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the proresks encoder's getalphadata that reads before the blocks buffer for interlaced frames with odd heights. Attackers can supply video with alpha and odd height encoded to interlaced ProRes 4444, causing out-of-bounds memory...

CVE-2026-125206: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that…

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the proresks encoder's getalphadata that reads before the blocks buffer for interlaced frames with odd heights. Attackers can supply video with alpha and odd height encoded to interlaced ProRes 4444, causing out-of-bounds memory...

PT-2007-7486 · Debian +3 · Debian +3

Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions 8.4.13 through 8.4.15 Description: The issue is related to a buffer overflow in the ReadImage function, which can be exploited by remote attackers using multi-frame interlaced GIF files where later frames are smaller than the...