CVE-2026-125234

FFmpeg versions through 9.0.2 are vulnerable to an integer overflow in the wavpack_encode_init() function located in libavcodec/wavpackenc.c. This flaw occurs when the software computes the block size from the sample rate and channel count. An attacker can exploit this by providing a crafted audi...

CVE-2026-125234

FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpackencodeinit in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate...

EUVD-2026-120184

FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpackencodeinit in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate...