CVE-2026-125247 | FFmpeg up to 9.0.2 DNG Decoder dng_decode_tiles TileWidth/TileLength integer overflow

November 9, 2026 Yanac

A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. This vulnerability affects the function dng_decode_tiles of the component DNG Decoder. Performing a manipulation of the argument TileWidth/TileLength results in integer overflow.

This vulnerability is cataloged as CVE-2026-125247. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More