Linux Distros Unpatched Vulnerability : CVE-2026-125182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder jointdecode function because cookdecodeinit does not check jssubbandstart...

CVE-2026-125182 FFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_start

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder jointdecode function because cookdecodeinit does not check jssubbandstart against subbands. Attackers can supply a crafted RealMedia file whose extradata causes reads past decodebuffer0, leaking pointers and...