PT-2026-141078
CVE-2026-125250
·
Published
2026-11-09
·
Updated
2026-11-09
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gif image write image() in libavcodec/gif.c because shrunk buf is sized from the first frame's linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, causing remap frame to palette() to write past shrunk buf and corrupt the heap during GIF transcoding.
Found an issue in the description? Have something to add? Feel free to write us 👾