CVE-2026-125249

FFmpeg versions 7.1 through 9.0.2 are vulnerable to an integer overflow within the ff_vk_decode_add_slice() function in libavcodec/vulkan_decode.c. This flaw results in an incorrect calculation of the Vulkan hardware acceleration bitstream buffer size. An attacker providing a crafted stream with ...