CVE-2026-125238 | FFmpeg up to 9.0.2 libxevd libavcodec/libxevd.c libxevd_receive_frame private_ref assertion

A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. The impacted element is the function libxevd_receive_frame of the file libavcodec/libxevd.c of the component libxevd. Such manipulation of the argument private_ref leads to reachable assertion.

This vulnerability is uniquely identified as CVE-2026-125238. Local access is required to approach this attack. No exploit exists.VulDB Recent EntriesRead More