7.0Hoch
CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search
Beschreibung
FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in libavcodec/nellymoserenc.c that allows writing one element past the opt and path allocations. Attackers can supply crafted audio to applications encoding Nellymoser with trellis enabled, causing idx to equal OPT_SIZE and overwrite adjacent heap memory.
Schwachstellentyp (CWE):
CWE-193
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24471 issue-tracking
- Patch Commit patch
- https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/nellymoserenc.c#L262 technical-description
- https://github.com/FFmpeg/FFmpeg product
- VulnCheck Advisory: FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search third-party-advisory