CVE-2026-125264

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the...

CVE-2026-125264

Versions of FFmpeg through 9.0.2 are affected by an uncontrolled resource consumption vulnerability in the parse_frame_header() function located in libavcodec/jpegxl_parser.c . The root cause is a failure to validate TOC entry counts against the remaining input. An attacker can provide a crafted ...

EUVD-2026-120214

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the...

CVE-2026-125264 FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC Count

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the...

CVE-2026-125264: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse_frame_header() in…

FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parseframeheader in libavcodec/jpegxlparser.c that fails to validate TOC entry counts against remaining input. Attackers can supply a crafted JPEG XL frame header with a permuted TOC and huge toccount, making the...