7.0Yüksek
CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search
Açıklama
FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in libavcodec/nellymoserenc.c that allows writing one element past the opt and path allocations. Attackers can supply crafted audio to applications encoding Nellymoser with trellis enabled, causing idx to equal OPT_SIZE and overwrite adjacent heap memory.
Zayıflık türü (CWE):
CWE-193
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24471 issue-tracking
- Patch Commit patch
- https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/nellymoserenc.c#L262 technical-description
- https://github.com/FFmpeg/FFmpeg product
- VulnCheck Advisory: FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search third-party-advisory