CVE-2026-125234: FFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_init

Q: Which workflows are exposed to this issue?

Applications using FFmpeg to transcode attacker-supplied audio into WavPack are exposed. The described trigger is a crafted input such as a WAV file whose header declares an extremely large sample rate and many channels.

Q: What does an attacker need to do to exploit it?

The attacker needs to provide a crafted audio file that is processed by the vulnerable WavPack encoding path. No privileges are required, but user interaction is required according to the supplied vector.

Q: What is the likely impact of successful exploitation?

Successful exploitation causes an infinite loop while block size is computed, hanging the transcoding application. The provided impact information indicates availability impact only, with no confidentiality or integrity impact.

Published Nov 9, 2026

Updated

FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpackencodeinit() in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate with many channels, to hang applications transcoding to WavPack.

Affected Software

1 affected component

FFmpeg FFmpeg<=9.0.2

Event History

Nov 9, 2026

CVE Published

via MITRE·07:11 PM

Data Sourced

via MITRE·07:11 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which workflows are exposed to this issue?

Applications using FFmpeg to transcode attacker-supplied audio into WavPack are exposed. The described trigger is a crafted input such as a WAV file whose header declares an extremely large sample rate and many channels.

What does an attacker need to do to exploit it?

The attacker needs to provide a crafted audio file that is processed by the vulnerable WavPack encoding path. No privileges are required, but user interaction is required according to the supplied vector.

What is the likely impact of successful exploitation?

Successful exploitation causes an infinite loop while block size is computed, hanging the transcoding application. The provided impact information indicates availability impact only, with no confidentiality or integrity impact.

CVE-2026-125234: FFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_init

Affected Software

Event History

Frequently Asked Questions

Which workflows are exposed to this issue?

What does an attacker need to do to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which workflows are exposed to this issue?

What does an attacker need to do to exploit it?

What is the likely impact of successful exploitation?