CVE-2026-125257 | FFmpeg up to 9.0.2 Nellymoser Encoder nellymoserenc.c get_exponent_dynamic off-by-one

SecurityVulns
Yanac

A vulnerability was found in FFmpeg up to 9.0.2. It has been declared as problematic. This affects the function get_exponent_dynamic of the file libavcodec/nellymoserenc.c of the component Nellymoser Encoder. The manipulation results in off-by-one.

This vulnerability is known as CVE-2026-125257. Attacking locally is a requirement. No exploit is available.VulDB Recent EntriesRead More