CVE-2026-125185: FFmpeg through 9.0.2 Division by Zero via AFGS1 Film Grain Scaling Points
FFmpeg through 9.0.2 contains a division by zero vulnerability in ffaomparsefilmgrainsets() that fails to reject AFGS1 scaling points with repeated x values. Attackers can supply crafted HEVC or VVC files with zero-increment scaling points in T.35 SEI messages, causing generatescaling() to divide by zero and crash the decoder.