PT-2026-141060

CVE-2026-125232

·

Published

2026-11-09

·

Updated

2026-11-09

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
FFmpeg through 9.0.2 contains a division by zero vulnerability in estimate motion b() in libavcodec/motion est.c, caused by frame timestamp distances truncated to 16 bits. Attackers can supply input with timestamp gaps that are multiples of 65536, crashing MPEG-4 Part 2 or MPEG-1/2 B-frame encoding with SIGFPE.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-369: Divide By Zero
Related identifiers
CVE-2026-125232
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com