PT-2026-141067
CVE-2026-125239
·
تاريخ النشر
2026-11-09
·
تاريخ التحديث
2026-11-09
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff dxva2 hevc fill picture parameters() that allows attackers to corrupt memory via unbounded non-uniform tile counts. Attackers can supply crafted HEVC bitstreams with many non-uniformly spaced tiles to write controlled 16-bit values past fixed-size DXVA arrays during DXVA2, D3D11VA, or D3D12VA decoding on Windows.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾