CVE-2026-125269 | FFmpeg up to 9.0.2 CBS SEI libavcodec/cbs_sei.c cbs_sei_delete_message double free

November 9, 2026 Yanac

A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. This issue affects the function cbs_sei_delete_message of the file libavcodec/cbs_sei.c of the component CBS SEI. This manipulation causes double free.

This vulnerability is tracked as CVE-2026-125269. The attack is restricted to local execution. No exploit exists.VulDB Recent EntriesRead More