CVE-2026-125239 | FFmpeg up to 9.0.2 HEVC ff_dxva2_hevc_fill_picture_parameters heap-based overflow

A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. This impacts the function ff_dxva2_hevc_fill_picture_parameters of the component HEVC Handler. Executing a manipulation can lead to heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-125239. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More