CVE-2026-125210

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125211 FFmpeg through 9.0.2 Heap Corruption via libaribcaption ASS Error Cleanup

FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaptiontransasssubtitle in libavcodec/libaribcaption.c that frees subtitle rectangles using regioncount instead of numrects. Attackers can supply crafted ARIB captions whose later region exceeds the 8 KiB...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125210: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...