EUVD-2026-120176

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbgreadheader in libavformat/sbgdec.c that derives an unbounded default frame size from the script's sample rate. Attackers can supply a crafted SBaGen script declaring a very high -r sample rate so the wavesynth...

PT-2026-141054

FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbg read header in libavformat/sbgdec.c that derives an unbounded default frame size from the script's sample rate. Attackers can supply a crafted SBaGen script declaring a very high -r sample rate so the wavesynth...