CVE-2026-125199

Description

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice buffers when init_get_bits8() fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25718 ↗
• https://github.com/FFmpeg/FFmpeg/commit/afdc555aace698b88c86d3f33a7773a6c8ba2897 ↗
• https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/vc1dec.c#L896 ↗
• https://github.com/FFmpeg/FFmpeg ↗
• https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-memory-leak-in-vc-1-decoder-via-vc1-decode-frame ↗