CVE-2026-125198

FFmpeg versions through 9.0.2 are vulnerable to a memory leak within the mediaformat_jni_setBuffer() function in libavcodec/mediacodec_wrapper.c. The root cause is the failure to free buffers wrapped with NewDirectByteBuffer(). Attackers can exploit this by providing crafted media files with larg...

EUVD-2026-120287

FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformatjnisetBuffer in libavcodec/mediacodecwrapper.c that never frees buffers wrapped with NewDirectByteBuffer. Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder...