UBUNTU-CVE-2026-125258: Medium severity ubuntu/ffmpeg vulnerability
FFmpeg through 9.0.2 contains a division by zero vulnerability in doviconfigureext() in libavcodec/dovirpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. Attackers can supply a crafted HEVC or AV1 input with a nonzero frame rate numerator and zero denominator to the dovirpu bitstream filter or libx265, libaom, or libsvtav1 encoders, causing denial of service.
Affected Software
Event History
Frequently Asked Questions
What conditions are required to trigger the crash?
An attacker must provide crafted HEVC or AV1 input with a nonzero frame-rate numerator and a zero frame-rate denominator. The input must reach the dovi_rpu bitstream filter or one of the affected libx265, libaom, or libsvtav1 encoders.
What is the practical impact of successful exploitation?
Successful exploitation causes a division by zero in dovi_configure_ext(), crashing the affected process. The described impact is denial of service; no confidentiality or integrity impact is specified.
How can I assess whether a workflow may be exposed?
Review FFmpeg processing paths that accept HEVC or AV1 input and use the dovi_rpu bitstream filter, libx265, libaom, or libsvtav1 encoders. Inputs with a frame-rate denominator of zero and a nonzero numerator match the stated trigger condition.