CVE-2026-125209

A flaw was found in FFmpeg. A heap buffer overflow can occur in the DVD subtitle encoder when transcoding a media file containing crafted bitmap subtitles due to underestimating the RLE Run-Length Encoding output size for odd-width rectangles. This vulnerability can lead to memory corruption,...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

CVE-2026-125233

A flaw was found in FFmpeg. A heap buffer overflow can occur in the DVB subtitle encoder when transcoding a specially crafted media file containing many bitmap subtitle rectangles due to undercounting the CLUT Color Look-Up Table segment headers. This vulnerability can lead to memory corruption,...

Medium: gstreamer-plugins-base

Issue Overview: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

Medium: gstreamer1-plugins-base

Issue Overview: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

Medium: gstreamer1-plugins-base

Issue Overview: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser

A flaw was found in FFmpeg. An attacker could exploit a signed integer overflow vulnerability within the DVB subtitle parser by providing a specially crafted WTV Windows Recorded TV Show file. This overflow can lead to a heap buffer overflow, enabling out-of-bounds memory writes. The consequence ...

Linux Distros Unpatched Vulnerability : CVE-2026-125209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for...

UBUNTU-CVE-2026-125209

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

CVE-2026-125209

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

CVE-2026-125233 FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsubencode in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output...

CVE-2026-125233 FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsubencode in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125210 FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaptiontranstextsubtitle in libavcodec/libaribcaption.c when decoding with subtype text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub-rects...

CVE-2026-125209 FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.c

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

EUVD-2026-120298

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

CVE-2026-125209 FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.c

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the...

CVE-2026-125209

Versions of FFmpeg before 8.1.3 and 9.x before 9.0.2 are vulnerable to a heap buffer overflow in the DVD subtitle encoder . The root cause is an incorrect calculation that underestimates the RLE output size for odd-width rectangles . An attacker can provide crafted bitmap subtitles that, during t...

CVE-2026-125040 Gst-plugins-base: gst-plugins-base: quadratic regex processing in srt/webvtt subtitle parser causes denial of service

A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. While sanitizing inline subtitle markup, the parser repeatedly searches the remaining text with unanchored regular expressions. A crafted subtitle cue with a long line of unmatched markup-like text can force...