CVE-2026-125068

Description

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decode_frame() in libavcodec/bink.c ignores init_get_bits() failure. Attackers can supply a crafted Bink file with a frame of about 2^28 bytes, overflowing the bit count and crashing the process for denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25704 ↗
• https://github.com/FFmpeg/FFmpeg/commit/5195d6f9729ad00b93e4d0f0bea309416fb4713e ↗
• https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/bink.c#L1275 ↗
• https://github.com/FFmpeg/FFmpeg ↗
• https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-null-pointer-dereference-in-bink-video-decoder ↗