CVE-2026-125235 | FFmpeg up to 9.0.2 Quick Sync Encoder libavcodec/qsvenc.c heap-based overflow

November 9, 2026 Yanac

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. This vulnerability affects unknown code of the file libavcodec/qsvenc.c of the component Quick Sync Encoder. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-125235. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More