CVE-2026-125217

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...

CVE-2026-125217 FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...

CVE-2026-125217

FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory use vulnerability within the roq_dpcm_encode_frame() function in libavcodec/roqaudioenc.c. This flaw occurs when the encoder is flushed early, causing it to encode stale heap contents. An attacker can exploit this by providin...

EUVD-2026-120306

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...

CVE-2026-125217 FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...

CVE-2026-125217: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in…

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...

PT-2026-141045

FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq dpcm encode frame in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized...