CVE-2026-125201

FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vkav1decodeslice in libavcodec/vulkanav1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware...

EUVD-2026-120290

FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vkav1decodeslice in libavcodec/vulkanav1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware...

CVE-2026-125201 FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 Heap Overflow via vulkan_av1.c

FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vkav1decodeslice in libavcodec/vulkanav1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware...

CVE-2026-125201 FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 Heap Overflow via vulkan_av1.c

FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vkav1decodeslice in libavcodec/vulkanav1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware...

CVE-2026-125201

The software FFmpeg (versions 7.0 before 8.1.3 and 9.x before 9.0.2) contains a heap out-of-bounds write vulnerability in the vk_av1_decode_slice() function located in libavcodec/vulkan_av1.c. The root cause is that the tile-count limit is only verified during entry, allowing an attacker to provi...