CVE-2026-125253

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the cbs_vp9_split_fragment() function located in libavcodec/cbs_vp9.c. On 32-bit builds , the overflow occurs during the superframe size check. An attacker can exploit this by providing a crafted VP9 packet with a forged super...

EUVD-2026-120203

FFmpeg through 9.0.2 contains an integer overflow in cbsvp9splitfragment in libavcodec/cbsvp9.c that wraps the superframe size check on 32-bit builds. Attackers can supply a crafted VP9 packet with a forged superframe index containing near-2^32 frame sizes, causing out-of-bounds reads that crash...