6 matches found
CVE-2026-125222
FFmpeg through 9.0.2 contains an integer overflow vulnerability in happarseframeheader in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap texsize, causing decompresschunksthrea...
CVE-2026-125222 FFmpeg through 9.0.2 Heap Buffer Overflow via hap_parse_frame_header()
FFmpeg through 9.0.2 contains an integer overflow vulnerability in happarseframeheader in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap texsize, causing decompresschunksthrea...
CVE-2026-125222
FFmpeg through 9.0.2 contains an integer overflow vulnerability in happarseframeheader in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap texsize, causing decompresschunksthrea...
EUVD-2026-120311
FFmpeg through 9.0.2 contains an integer overflow vulnerability in happarseframeheader in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap texsize, causing decompresschunksthrea...
PT-2026-141050
FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap parse frame header in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap tex size, causing decompress chunks...
CVE-2026-125222: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap_parse_frame_header() in libavcodec/hapdec.c that…
FFmpeg through 9.0.2 contains an integer overflow vulnerability in happarseframeheader in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap texsize, causing decompresschunksthrea...