CVE-2026-125223 | FFmpeg up to 9.0.2 VP9 decoder vp9_decode_frame memory leak

November 9, 2026 Yanac

A vulnerability categorized as problematic has been discovered in FFmpeg up to 9.0.2. This affects the function vp9_decode_frame of the component VP9 decoder. Executing a manipulation can lead to memory leak.

This vulnerability is handled as CVE-2026-125223. It is possible to launch the attack on the local host. There is not any exploit available.VulDB Recent EntriesRead More