UBUNTU-CVE-2026-125248: Integer Overflow
FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1encvulkan.c that undersizes the float remap GPU buffer for large frames. Attackers can supply large GBRPF32 or GBRAPF32 images or videos that, when transcoded to FFV1 with the Vulkan encoder, trigger out-of-bounds GPU memory writes causing crashes or memory corruption.
Affected Software
Event History
Frequently Asked Questions
Is this exploitable remotely without user involvement?
The severity vector identifies local attack access and requires user interaction. The issue is therefore not described as a network-reachable, no-interaction attack.
Which transcoding workflows are exposed?
Exposure requires transcoding large GBRPF32 or GBRAPF32 images or videos to FFV1 using the Vulkan encoder. The affected code is in the FFV1 Vulkan encoder path.
How can I determine whether my deployment may be affected?
Check whether the installed FFmpeg version is from 9.0 through 9.0.2 and whether it performs FFV1 Vulkan encoding of large GBRPF32 or GBRAPF32 media. Systems that do not use that encoder path are not described as triggering this issue.