CVE-2026-125210

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125211

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaptiontransasssubtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using regioncount instead of numrects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 KiB...

CVE-2026-125211 FFmpeg through 9.0.2 Heap Corruption via libaribcaption ASS Error Cleanup

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaptiontransasssubtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using regioncount instead of numrects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 KiB...

EUVD-2026-120300

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaptiontransasssubtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using regioncount instead of numrects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 KiB...

CVE-2026-125211

FFmpeg versions through 9.0.2 are vulnerable to an out-of-bounds read and invalid free vulnerability in the aribcaption_trans_ass_subtitle() function located in libavcodec/libaribcaption.c. The root cause is the improper use of region_count instead of num_rects when freeing subtitle rectangles. A...

EUVD-2026-120299

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125210

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the aribcaption_trans_text_subtitle() function located in libavcodec/libaribcaption.c. The issue occurs when decoding streams with sub_type text. An attacker can provide a crafted ARIB STD-B24 caption stream with zero regio...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125211: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaption_trans_ass_subtitle()…

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaptiontransasssubtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using regioncount instead of numrects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 KiB...

PT-2026-141039

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaption trans ass subtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using region count instead of num rects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 K...

CVE-2026-125210: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

PT-2026-141038

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption trans text subtitle in libavcodec/libaribcaption.c when decoding with sub type text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...