{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ffmpeg--9.0.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-125259"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains an integer overflow vulnerability in the ff_prores_kostya_encode_init() function caused by 32-bit arithmetic miscalculating frame_size_upper_bound for large frame dimensions. Attackers can supply a high-resolution video transcoded with the prores_ks encoder, which causes encode_frame() to write slices past an undersized packet buffer, leading to heap memory corruption.\u003c/p\u003e\n","date_modified":"2026-11-09T23:59:17Z","date_published":"2026-11-09T23:59:17Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow-d0e0d71a/","summary":"FFmpeg through 9.0.2 contains an integer overflow vulnerability in ff_prores_kostya_encode_init() due to 32-bit arithmetic miscalculating frame_size_upper_bound for large frame dimensions.","title":"FFmpeg: Integer overflow in ff_prores_kostya_encode_init (CVE-2026-125259)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow-d0e0d71a/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125260"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eFFmpeg versions 9.0.2 and earlier contain a heap buffer overflow vulnerability in the file libavcodec/exrenc.c. The flaw resides in the encode_scanline_rle() function. An attacker can trigger this vulnerability by providing a crafted input file that, when transcoded to OpenEXR with RLE compression, contains frame dimensions that exceed the encoder's initially configured height. This condition leads to an out-of-bounds write beyond the scanline array, resulting in heap memory corruption and application crashes.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows an attacker to cause an application crash. While the source confirms heap memory corruption, it does not explicitly confirm remote code execution (RCE). The impact is primarily denial of service for any application utilizing FFmpeg to transcode media inputs.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all systems and applications within the environment that utilize FFmpeg libraries.\u003c/li\u003e\n\u003cli\u003ePrioritize patching FFmpeg to a version beyond 9.0.2 once a secure version is made available by the maintainers.\u003c/li\u003e\n\u003cli\u003eImplement sandboxing or isolation for media processing services that handle untrusted, user-supplied files to contain potential crashes and exploitation attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T21:58:44Z","date_published":"2026-11-09T21:58:44Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-3f17725c/","summary":"FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in libavcodec/exrenc.c that can cause memory corruption and application crashes during OpenEXR RLE encoding of frames exceeding initial height.","title":"FFmpeg: Heap buffer overflow in libavcodec (CVE-2026-125260)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-3f17725c/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125251"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC (H.266) decoder \u003ccode\u003ealloc_frame()\u003c/code\u003e function in \u003ccode\u003elibavcodec/vvc/refs.c\u003c/code\u003e. This flaw undersizes the reference picture list allocation on 32-bit builds. An attacker can provide a crafted VVC file with a large number of NAL units per access unit to trigger heap out-of-bounds writes and corrupt memory.\u003c/p\u003e\n","date_modified":"2026-11-09T19:56:24Z","date_published":"2026-11-09T19:56:24Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-vvc-overflow/","summary":"FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc_frame() function that leads to heap out-of-bounds writes on 32-bit builds.","title":"FFmpeg: VVC decoder heap-based memory corruption (CVE-2026-125251)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-vvc-overflow/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125241"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":["cve-2026-125241","heap-overflow","ffmpeg","remote-code-execution"],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eFFmpeg versions through 9.0.2 contain a heap-based buffer overflow vulnerability in \u003ccode\u003elibavcodec/flicvideo.c\u003c/code\u003e. The flaw exists in the \u003ccode\u003echeck_pixel_ptr()\u003c/code\u003e function, which fails to correctly validate bounds when processing FLIC files containing negative-stride frames. An attacker can supply a specially crafted FLIC file to trigger an out-of-bounds write, leading to heap memory corruption.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in an application crash (denial of service) or the potential for arbitrary code execution within the context of the user running the FFmpeg-enabled application.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems and software utilizing FFmpeg libraries.\u003c/li\u003e\n\u003cli\u003eMonitor for the release of patched versions of FFmpeg beyond 9.0.2 and prioritize updates for all affected integrations.\u003c/li\u003e\n\u003cli\u003eImplement memory safety mitigations at the compiler or OS level (e.g., ASLR, DEP) to reduce the likelihood of successful exploitation where possible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T19:55:56Z","date_published":"2026-11-09T19:55:56Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-cve-2026-125241/","summary":"FFmpeg versions 9.0.2 and earlier are vulnerable to a heap buffer overflow in the libavcodec/flicvideo.c component, which could allow remote code execution or application crashes via crafted FLIC files.","title":"FFmpeg: Heap buffer overflow in libavcodec/flicvideo.c (CVE-2026-125241)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-cve-2026-125241/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125239"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the function \u003ccode\u003eff_dxva2_hevc_fill_picture_parameters()\u003c/code\u003e. Attackers can supply crafted HEVC bitstreams with many non-uniformly spaced tiles to write controlled 16-bit values past fixed-size DXVA arrays. This issue occurs during DXVA2, D3D11VA, or D3D12VA decoding on Windows.\u003c/p\u003e\n","date_modified":"2026-11-09T19:55:50Z","date_published":"2026-11-09T19:55:50Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-53a04cca/","summary":"FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that allows attackers to corrupt memory via crafted HEVC bitstreams during hardware-accelerated decoding on Windows.","title":"FFmpeg: Heap buffer overflow in ff_dxva2_hevc_fill_picture_parameters (CVE-2026-125239)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-53a04cca/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-125233"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in \u003ccode\u003edvbsub_encode()\u003c/code\u003e in \u003ccode\u003elibavcodec/dvbsubenc.c\u003c/code\u003e. The vulnerability occurs because the code undercounts each CLUT segment header by two bytes.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAttackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output buffer and corrupts heap memory.\u003c/p\u003e\n","date_modified":"2026-11-09T19:55:37Z","date_published":"2026-11-09T19:55:37Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-dvbsub-overflow/","summary":"FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec/dvbsubenc.c due to undercounting CLUT segment headers.","title":"FFmpeg: Heap buffer overflow in dvbsub_encode (CVE-2026-125233)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-dvbsub-overflow/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125227"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","ffmpeg","memory-corruption"],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains an integer overflow in the cbs_jpeg_write_scan() function located in libavcodec/cbs_jpeg.c. This vulnerability is specifically triggered on 32-bit architectures when the application processes a crafted MJPEG or JPEG stream containing a scan size of 512 MiB or greater, handled by CBS bitstream filters such as filter_units. Exploitation results in heap buffer corruption or application crashes.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may lead to a denial of service (application crash) or potential memory corruption via heap buffer overflow. Impact is limited to 32-bit build environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems and applications utilizing FFmpeg versions 9.0.2 or earlier.\u003c/li\u003e\n\u003cli\u003ePrioritize migration from 32-bit to 64-bit builds of FFmpeg where possible, as the overflow condition is specific to 32-bit architectures.\u003c/li\u003e\n\u003cli\u003eMonitor for security updates from FFmpeg and apply patches once a version addressing CVE-2026-125227 is released.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T19:55:27Z","date_published":"2026-11-09T19:55:27Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow-93431ef6/","summary":"FFmpeg versions through 9.0.2 contain an integer overflow in the cbs_jpeg_write_scan function, leading to heap buffer overflows on 32-bit architectures when processing crafted MJPEG/JPEG streams.","title":"FFmpeg: Integer overflow in cbs_jpeg_write_scan (CVE-2026-125227)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow-93431ef6/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125222"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","ffmpeg","memory-corruption"],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eFFmpeg through version 9.0.2 is vulnerable to an integer overflow within the hap_parse_frame_header() function located in libavcodec/hapdec.c. This flaw occurs when processing maliciously crafted Hap video frames that contain Snappy length prefixes. On 32-bit builds, these prefixes can trigger an integer wrap-around on the tex_size variable, subsequently leading to a heap buffer overflow in decompress_chunks_thread(). An attacker could potentially leverage this condition to cause an application crash or achieve arbitrary code execution.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in an application crash (Denial of Service) or arbitrary code execution within the context of the user running the FFmpeg-dependent application. The vulnerability specifically impacts 32-bit environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit infrastructure to identify applications or services utilizing FFmpeg versions 9.0.2 or older.\u003c/li\u003e\n\u003cli\u003ePrioritize patching or updating FFmpeg-dependent software to versions utilizing patched FFmpeg libraries once available from upstream or distribution maintainers.\u003c/li\u003e\n\u003cli\u003eIf immediate patching is not possible, implement strict input validation or sandboxing for untrusted video files processed by FFmpeg in 32-bit environments.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T19:55:21Z","date_published":"2026-11-09T19:55:21Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow/","summary":"FFmpeg versions through 9.0.2 contain an integer overflow vulnerability in the hap_parse_frame_header function, which can be exploited by a crafted Hap video frame to cause a heap buffer overflow and potential remote code execution on 32-bit systems.","title":"FFmpeg: Integer overflow in hap_parse_frame_header (CVE-2026-125222)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-integer-overflow/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125219"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vdpau_hevc_start_frame() in libavcodec/vdpau_hevc.c that copies unbounded PPS tile counts into fixed-size VDPAU arrays. Attackers can supply crafted HEVC bitstreams with excessive tile columns or rows to write controlled 16-bit values past heap-allocated hwaccel data, corrupting memory in applications using VDPAU decoding.\u003c/p\u003e\n","date_modified":"2026-11-09T19:55:15Z","date_published":"2026-11-09T19:55:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-buffer-overflow-3150fe62/","summary":"FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vdpau_hevc_start_frame() within libavcodec/vdpau_hevc.c.","title":"FFmpeg: Heap buffer overflow in vdpau_hevc_start_frame (CVE-2026-125219)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-buffer-overflow-3150fe62/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125213"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["FFmpeg"],"content_html":"\u003cp\u003eFFmpeg versions through 9.0.2 contain a heap buffer overflow vulnerability in the PSD decoder located in 'libavcodec/psd.c'. The issue occurs due to improper handling of image dimensions and channel counts on 32-bit builds, where the product of these values can exceed 4 GB. This triggers an integer truncation during the 'av_malloc' allocation, subsequently allowing 'decode_rle()' to write data beyond the allocated heap buffer boundaries.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in process crashes (denial of service) or potential arbitrary code execution under the context of the application utilizing the FFmpeg library.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade FFmpeg to a version beyond 9.0.2 as soon as a patch is available.\u003c/li\u003e\n\u003cli\u003eImplement memory safety monitoring for applications using FFmpeg to process untrusted PSD files.\u003c/li\u003e\n\u003cli\u003eAudit infrastructure to identify applications utilizing 32-bit builds of the FFmpeg library.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T19:53:02Z","date_published":"2026-11-09T19:53:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-e749998b/","summary":"FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the PSD decoder, allowing remote attackers to achieve memory corruption or arbitrary code execution via crafted PSD images on 32-bit systems.","title":"FFmpeg: PSD decoder heap buffer overflow (CVE-2026-125213)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow-e749998b/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7,"id":"CVE-2026-125196"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FFmpeg (\u003c= 9.0.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eFFmpeg versions through 9.0.2 contain a heap buffer overflow vulnerability in the \u003ccode\u003eliboapve_encode()\u003c/code\u003e function located in \u003ccode\u003elibavcodec/liboapvenc.c\u003c/code\u003e. The vulnerability is triggered when processing frames larger than the configured encoder dimensions. Attackers can craft video files with mid-stream resolution changes so that transcoding to APV without rescaling writes pixel data past the \u003ccode\u003eimgb\u003c/code\u003e plane buffers, resulting in heap memory corruption.\u003c/p\u003e\n","date_modified":"2026-11-09T19:52:02Z","date_published":"2026-11-09T19:52:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow/","summary":"A heap buffer overflow in FFmpeg through 9.0.2 allows for heap memory corruption when transcoding video files with mid-stream resolution changes.","title":"FFmpeg: Heap buffer overflow in liboapve_encode (CVE-2026-125196)","url":"https://feed.craftedsignal.io/briefs/2026-11-ffmpeg-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - FFmpeg (\u003c= 9.0.2)","version":"https://jsonfeed.org/version/1.1"}