CVE-2026-125228 | FFmpeg up to 8.1.2/9.0.1 Vorbis Encoder libavcodec/vorbisenc.c put_vector out-of-bounds

A vulnerability was found in FFmpeg up to 8.1.2/9.0.1 and classified as problematic. Affected by this issue is the function put_vector of the file libavcodec/vorbisenc.c of the component Vorbis Encoder. Such manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-125228. The attack needs to be performed locally. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More