CVE-2026-125269

FFmpeg versions through 9.0.2 are susceptible to a double free vulnerability within the libavcodec/cbs_sei.c component. The root cause is that the cbs_sei_delete_message() function leaves a stale extension_data reference, which is subsequently reused by ff_cbs_sei_add_message(). An attacker can t...

EUVD-2026-120219

FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbssei.c where cbsseideletemessage leaves a stale extensiondata reference that ffcbsseiaddmessage reuses. Attackers can supply a crafted H.264 stream with a display orientation SEI message followed by payload extension data,...