CVE-2026-125245 | FFmpeg up to 9.0.2 MJPEG Decoder libavcodec/mjpegdec.c ff_mjpeg_decode_sof memory leak

November 9, 2026 Yanac

A vulnerability, which was classified as critical, has been found in FFmpeg up to 9.0.2. Affected by this issue is the function ff_mjpeg_decode_sof of the file libavcodec/mjpegdec.c of the component MJPEG Decoder. This manipulation causes memory leak.

This vulnerability is tracked as CVE-2026-125245. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More