UBUNTU-CVE-2026-125204: Buffer Overflow

Published Nov 10, 2026

Updated

FFmpeg through 9.0.2 contains a heap buffer overflow in fflibwebpgetframe() in libwebpenccommon.c that lets attackers corrupt memory when crthreshold is set. Attackers can supply crafted media that increases resolution mid-stream, causing memcpy() to write pixel data past the stale reference frame and crash applications.

Affected Software

7 affected components

ubuntu/ffmpeg*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required for exploitation?

An attacker must be able to provide crafted media to an application using the affected FFmpeg code. The vulnerable path requires cr_threshold to be set, and the media must increase resolution mid-stream; user interaction is also required according to the supplied severity vector.

Who is most exposed?

Applications that accept or process attacker-controlled media with FFmpeg are the relevant exposure point, particularly where cr_threshold is enabled. Locally accessible attack surfaces are indicated by the supplied AV:L vector.

What is the impact if exploitation succeeds?

The crafted media can cause a heap buffer overflow when pixel data is copied past a stale reference frame. This can corrupt memory and crash the application; the severity vector also indicates high confidentiality, integrity, and availability impact.

How can I tell whether my deployment is affected?

Check whether the installed Ubuntu FFmpeg package is at or below FFmpeg 9.0.2 and whether the application enables cr_threshold while processing media that may change resolution during a stream. A crash during such processing may be consistent with the issue, but the provided data does not specify a unique detection signature.

UBUNTU-CVE-2026-125204: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What conditions are required for exploitation?

Who is most exposed?

What is the impact if exploitation succeeds?

How can I tell whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

Who is most exposed?

What is the impact if exploitation succeeds?

How can I tell whether my deployment is affected?