CVE-2026-125244 | FFmpeg up to 8.1.2/9.0.1 VVC decoder libavcodec/vvc/ps.c sh_entry_points out-of-bounds write

A vulnerability classified as critical was found in FFmpeg up to 8.1.2/9.0.1. Affected by this vulnerability is the function sh_entry_points of the file libavcodec/vvc/ps.c of the component VVC decoder. The manipulation results in out-of-bounds write.

This vulnerability is identified as CVE-2026-125244. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More