CVE-2026-125202

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

CVE-2026-125202 FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile Arrays

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

CVE-2026-125202

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the vaapi_hevc_start_frame() function located in libavcodec/vaapi_hevc.c. The root cause is the copying of unbounded PPS tile counts into fixed-size arrays. An attacker can exploit this by providing a crafted HEVC bitstream...

EUVD-2026-120291

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...

CVE-2026-125202: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapihevcstartframe in libavcodec/vaapihevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values pas...