CVE-2026-125214High· 7.0▾ TwilightFFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray (M2TS) LPCM stream whose payload length is not a multi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 38.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray (M2TS) LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the audio frame buffer.
FFmpeg <= 9.0.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-125260High· 7.0FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE Path
CVE-2026-125196High· 7.0FFmpeg through 9.0.2 Heap Buffer Overflow via liboapv APV Encoder Wrapper
CVE-2026-125204High· 7.0FFmpeg through 9.0.2 Heap Buffer Overflow in libwebp Encoder Conditional Replenishment
CVE-2026-125212High· 7.0FFmpeg through 9.0.2 Heap Buffer Overflow via VideoToolbox Encoder
CVE-2026-125218High· 7.0FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()
CVE-2026-125235High· 7.0FFmpeg through 9.0.2 Heap Overflow via QSV Encoder submit_frame()