Linux Distros Unpatched Vulnerability : CVE-2026-125191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane captu...

Linux Distros Unpatched Vulnerability : CVE-2026-125208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are no...

CVE-2026-59618

In smfcv4l2sselection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-59618

A vulnerability exists in smfc_v4l2_s_selection within the smfc-v4l2-ioctls.c file. An integer overflow can trigger an out of bounds read from adjacent shared memory buffers. This flaw may lead to local information disclosure without requiring additional execution privileges or user interaction. ...

CVE-2026-59618

In smfcv4l2sselection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

EUVD-2026-122661

In smfcv4l2sselection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

PT-2026-144564

In smfc v4l2 s selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...

UBUNTU-CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

UBUNTU-CVE-2026-125208

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125208

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125191

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

CVE-2026-125270 FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M Encoder

FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c that mishandles frames with negative linesize. Attackers can supply bottom-up AVI or PNM/PFM files that are transcoded to a V4L2 M2M encoder, crashing the application or...

EUVD-2026-120297

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125208

FFmpeg versions through 9.0.2 are susceptible to an out-of-bounds write vulnerability within the v4l2_buffer_swframe_to_buf() function located in libavcodec/v4l2_buffers.c. The root cause is the failure to validate cumulative plane offsets against the V4L2 buffer length . An attacker can provide ...

CVE-2026-125208 FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.c

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125208 FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.c

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125208 FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.c

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2bufferswframetobuf in libavcodec/v4l2buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in...

CVE-2026-125191 FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...

CVE-2026-125191 FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ffv4l2m2mcodecreinit wait forever an...