CVE-2026-125218: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

PT-2026-141046

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode apng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNG DISPOSE OP BACKGROUND memset writes past prev...