CVE-2026-125258

FFmpeg through 9.0.2 contains a division by zero vulnerability in doviconfigureext in libavcodec/dovirpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. Attackers can supply a crafted HEVC or AV1 input with a nonzero frame rate numerator and zero...

CVE-2026-125200

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

CVE-2026-125258 FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.c

FFmpeg through 9.0.2 contains a division by zero vulnerability in doviconfigureext in libavcodec/dovirpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. Attackers can supply a crafted HEVC or AV1 input with a nonzero frame rate numerator and zero...

CVE-2026-125200 FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

CVE-2026-125200

Versions of FFmpeg through 9.0.2 are vulnerable to a memory leak in libavcodec/libx265.c. The root cause is that libx265_encode_frame() fails to free the rpu.payload memory allocated by ff_dovi_rpu_generate(). An attacker can exploit this by providing crafted Dolby Vision HEVC or AV1 files , lead...

CVE-2026-125200 FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

EUVD-2026-120289

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

PT-2026-141028

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265 encode frame never frees the rpu.payload allocated by ff dovi rpu generate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

CVE-2026-125200: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never…

FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265encodeframe never frees the rpu.payload allocated by ffdovirpugenerate. Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265...

CVE-2026-125258: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in dovi_configure_ext() in libavcodec/dovi_rpuenc.c that…

FFmpeg through 9.0.2 contains a division by zero vulnerability in doviconfigureext in libavcodec/dovirpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. Attackers can supply a crafted HEVC or AV1 input with a nonzero frame rate numerator and zero...

PT-2026-141086

FFmpeg through 9.0.2 contains a division by zero vulnerability in dovi configure ext in libavcodec/dovi rpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. Attackers can supply a crafted HEVC or AV1 input with a nonzero frame rate numerator and zero...