CVE-2026-125208

FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2 buffer swframe to buf() in libavcodec/v4l2 buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. Attackers can supply crafted video whose dimensions or padding cause unsigned wraparound in v4l2 bufref to buf(), making memcpy() write past the mmaped driver buffer during V4L2 M2M encoding.