CVE-2026-125194

Description

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm_dvd_encode_frame() in libavcodec/pcm-dvdenc.c when a 24-bit final frame holds fewer samples than one block. Attackers can supply 24-bit 48 or 96 kHz audio whose length leaves a short final frame, causing the loop counter to wrap and crash the transcoding process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25694 ↗
• https://github.com/FFmpeg/FFmpeg/commit/cfe6a6cd7de59341a70ebe6a2d477f3281aec834 ↗
• https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/pcm-dvdenc.c#L120 ↗
• https://github.com/FFmpeg/FFmpeg ↗
• https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-out-of-bounds-read-via-pcm-dvd-encoder ↗