CVE-2026-125249 | FFmpeg up to 9.0.2 Vulkan Decoder vulkan_decode.c ff_vk_decode_add_slice integer overflow

November 9, 2026 Yanac

A vulnerability identified as critical has been detected in FFmpeg up to 9.0.2. This vulnerability affects the function ff_vk_decode_add_slice of the file libavcodec/vulkan_decode.c of the component Vulkan Decoder. The manipulation leads to integer overflow.

This vulnerability is uniquely identified as CVE-2026-125249. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More