7 matches found
CVE-2026-125197
FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...
EUVD-2026-120286
FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...
CVE-2026-125197 FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread Decoding
FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...
CVE-2026-125197
Versions of FFmpeg through 9.0.2 are vulnerable to an integer underflow in the decode_frame() function within libavcodec/lcldec.c. This flaw allows an attacker to trigger a heap out-of-bounds read by providing a crafted AVI or MKV file containing an LCL video stream with short ZLIB packets (short...
CVE-2026-125197 FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread Decoding
FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...
PT-2026-141025
FFmpeg through 9.0.2 contains an integer underflow in decode frame in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAG MULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...
CVE-2026-125197: FFmpeg: FFmpeg through 9.0.2 contains an integer underflow in decode_frame() in libavcodec/lcldec.c that allows attackers to…
FFmpeg through 9.0.2 contains an integer underflow in decodeframe in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAGMULTITHREAD. Attackers can supply a crafted AVI or MKV file with an LCL video stream whose packet is shorter than 8...