CVE-2026-125198Low· 2.5▾ SunlitFFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.
FFmpeg <= 9.0.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-125252Medium· 4.7FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture Buffers
CVE-2026-125173Medium· 5.5FFmpeg through 9.0.2 Memory Leak in libxevd EVC Decoder Wrapper
CVE-2026-125199Medium· 5.5FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()
CVE-2026-125200Medium· 5.5FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads
CVE-2026-125223Medium· 4.7FFmpeg 8.0 through 9.0.2 Memory Leak in VP9 Decoder via vp9_decode_frame
CVE-2026-125236Low· 3.3FFmpeg through 9.0.2 VVC Decoder Memory Leak via alloc_frame()