CVE-2026-125262 | FFmpeg up to 9.0.2 LCEVC Decoder libavcodec/lcevcdec.c heap-based overflow

November 9, 2026 Yanac

A vulnerability identified as problematic has been detected in FFmpeg up to 9.0.2. Affected by this vulnerability is an unknown functionality of the file libavcodec/lcevcdec.c of the component LCEVC Decoder. Performing a manipulation results in heap-based buffer overflow.

This vulnerability was named CVE-2026-125262. The attack needs to be approached locally. There is no available exploit.VulDB Recent EntriesRead More