6 matches found
CVE-2026-125189
FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevcmetadata bitstream filter caused by a process block position mismatch in lcevcmetadatahandlevui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an avassert0 failure in...
EUVD-2026-120278
FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevcmetadata bitstream filter caused by a process block position mismatch in lcevcmetadatahandlevui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an avassert0 failure in...
CVE-2026-125189
FFmpeg versions 8.1 through 9.0.2 are vulnerable to a denial of service (DoS) vulnerability in the lcevc_metadata bitstream filter . The root cause is a process block position mismatch within the lcevc_metadata_handle_vui() function. An attacker can trigger an av_assert0 failure in ff_cbs_lcevc_l...
CVE-2026-125189 FFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream Filter
FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevcmetadata bitstream filter caused by a process block position mismatch in lcevcmetadatahandlevui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an avassert0 failure in...
CVE-2026-125189 FFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream Filter
FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevcmetadata bitstream filter caused by a process block position mismatch in lcevcmetadatahandlevui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an avassert0 failure in...
CVE-2026-125189: FFmpeg: FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevc_metadata bitstream filter caused by a…
FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevcmetadata bitstream filter caused by a process block position mismatch in lcevcmetadatahandlevui. Attackers can supply crafted LCEVC access units with two IDR or non-IDR NAL units to trigger an avassert0 failure in...