CVE-2026-125183 FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps3dextension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...

PT-2026-141011

FFmpeg through 9.0.2 contains a denial of service vulnerability in pps 3d extension in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit...