PT-2026-141098

FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2 buffer swframe to buf in libavcodec/v4l2 buffers.c that mishandles frames with negative linesize. Attackers can supply bottom-up AVI or PNM/PFM files that are transcoded to a V4L2 M2M encoder, crashing the application o...

PT-2026-141019

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2 buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ff v4l2 m2m codec reinit wait forev...