6 matches found
CVE-2026-125214
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcmbluraydecodeframe in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the...
CVE-2026-125214 FFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM Decoder
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcmbluraydecodeframe in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the...
CVE-2026-125214 FFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM Decoder
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcmbluraydecodeframe in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the...
EUVD-2026-120303
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcmbluraydecodeframe in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the...
CVE-2026-125214
FFmpeg versions through 9.0.2 are susceptible to a heap buffer overflow in the pcm_bluray_decode_frame() function located in libavcodec/pcm-bluray.c on big-endian hosts . An attacker can exploit this by providing a crafted Blu-ray (M2TS) LPCM stream where the payload length is not a multiple of t...
CVE-2026-125214: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in…
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcmbluraydecodeframe in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray M2TS LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the...