CVE-2026-120210 | FFmpeg up to 9.0.2 IMF demuxer ASSETMAP path traversal (EUVD-2026-114731)

October 31, 2026 Yanac

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is an unknown functionality of the component IMF demuxer. Such manipulation of the argument ASSETMAP leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-120210. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More