7 matches found
CVE-2026-125244
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's shentrypoints function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing...
CVE-2026-125244 FFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_points
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's shentrypoints function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing...
CVE-2026-125244
FFmpeg versions prior to 8.1.3 and 9.x before 9.0.2 are affected by an out-of-bounds write vulnerability within the VVC decoder 's sh_entry_points() function located in libavcodec/vvc/ps.c. An attacker can provide a crafted VVC (H.266) bitstream where the SPS/PPS tile and WPP layout generate an e...
CVE-2026-125244 FFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_points
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's shentrypoints function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing...
EUVD-2026-120194
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's shentrypoints function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing...
PT-2026-141072
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's sh entry points function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing entry point...
CVE-2026-125244: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder'sā¦
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's shentrypoints function in libavcodec/vvc/ps.c. Attackers can supply a crafted VVC H.266 bitstream whose SPS/PPS tile and WPP layout produces excess entry points, overflowing...