CVE-2026-125188: FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced Encoding

FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in libavcodec/proresencanatoliy.c that occurs when the proresaw encoder processes interlaced, odd-height frames. Attackers can supply odd-height video that causes subimagewithfilltemplate() to fill padding rows from memory before the filly buffer, leaking heap contents into the encoded output.