ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder

A flaw was found in FFmpeg, specifically within the NVIDIA NVDEC hardware decoder. A remote attacker could exploit this double-free vulnerability by providing a specially crafted video file. This can lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial ...

ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder

A flaw was found in FFmpeg, specifically within the NVIDIA NVDEC hardware decoder. A remote attacker could exploit this double-free vulnerability by providing a specially crafted video file. This can lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial ...

Linux Distros Unpatched Vulnerability : CVE-2026-125245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer witho...

UBUNTU-CVE-2026-125245

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125255

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-125245

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125265 FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer

FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...

CVE-2026-125265 FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer

FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ffnvdecstartframe fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before endframe, causing cuvidDecodePicture to read freed heap memory, crashing...

CVE-2026-125255 FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated Decoding

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-125255 FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated Decoding

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-125255 FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated Decoding

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-125255

FFmpeg versions through 9.0.2 are vulnerable to a use after free vulnerability in libavcodec/mjpegdec.c. An attacker can trigger freed buffer reads by providing a crafted MJPEG stream that includes a SOF marker without a preceding SOI . This causes ff_mjpeg_decode_sof() to pass a stale raw_image_...

CVE-2026-125245 FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245 FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

EUVD-2026-120195

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

CVE-2026-125245

FFmpeg versions through 9.0.2 are vulnerable to a memory leak in the ff_mjpeg_decode_sof() function located in libavcodec/mjpegdec.c. The root cause is the overwriting of the hwaccel_picture_private pointer without properly freeing the previous memory allocation. An attacker can exploit this by s...

CVE-2026-125255: FFmpeg: FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger…

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ffmjpegdecodesof to pass a stale rawimagebuffer pointer to...

CVE-2026-125245: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which…

FFmpeg through 9.0.2 contains a memory leak vulnerability in ffmjpegdecodesof in libavcodec/mjpegdec.c, which overwrites the hwaccelpictureprivate pointer without freeing it. Attackers can supply crafted MJPEG streams with repeated SOF markers or failing frames to leak hwaccel private data and...

PT-2026-141093

FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff nvdec start frame fails to reset ctx-bitstream after slice errors. Attackers can supply crafted video that abandons a picture before end frame, causing cuvidDecodePicture to read freed heap memory,...

PT-2026-141083

FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ff mjpeg decode sof to pass a stale raw image buffer pointe...