PT-2026-141083
CVE-2026-125255
·
Published
2026-11-09
·
Updated
2026-11-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. Attackers can supply crafted MJPEG streams causing ff mjpeg decode sof() to pass a stale raw image buffer pointer to hwaccel decoders like NVDEC, crashing applications or leaking heap contents.
Found an issue in the description? Have something to add? Feel free to write us 👾