CVE-2026-125183

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

CVE-2026-125183 FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

CVE-2026-125183 FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

EUVD-2026-120272

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

CVE-2026-125183

FFmpeg versions through 9.0.2 are vulnerable to a Denial of Service (DoS) vulnerability within the pps_3d_extension() function in libavcodec/hevc/ps.c. The root cause is unbounded depth lookup table loops , which can be triggered by an attacker providing crafted HEVC files containing repeated PPS...

CVE-2026-125183: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in pps_3d_extension() in libavcodec/hevc/ps.c that…

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

PT-2026-141011

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps 3d extension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

PT-2015-2760

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue is related to the ff hevc parse sps function in libavcodec/hevc ps.c, which does not properly validate the Chroma Format Indicator. This allows remote attackers to cause a denial of service,...