CVE-2026-125227

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow within the cbs_jpeg_write_scan() function in libavcodec/cbs_jpeg.c. This flaw leads to a heap buffer overflow specifically on 32-bit builds . An attacker can exploit this by providing a crafted MJPEG/JPEG stream containing a scan...

EUVD-2026-120177

FFmpeg through 9.0.2 contains an integer overflow in cbsjpegwritescan in libavcodec/cbsjpeg.c that causes a heap buffer overflow on 32-bit builds. Attackers can supply a crafted MJPEG/JPEG stream with a scan of 512 MiB or more, processed by CBS bitstream filters like filterunits, to corrupt the...

ALPINE-CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...