CVE-2026-125236 | FFmpeg up to 9.0.2 VVC Reference libavcodec/vvc/refs.c alloc_frame allocation of resources

November 9, 2026 Yanac

A vulnerability categorized as problematic has been discovered in FFmpeg up to 9.0.2. Impacted is the function alloc_frame of the file libavcodec/vvc/refs.c of the component VVC Reference Handler. The manipulation results in allocation of resources.

This vulnerability is known as CVE-2026-125236. Attacking locally is a requirement. No exploit is available.VulDB Recent EntriesRead More