CVE-2026-125255 | FFmpeg up to 9.0.2 MJPEG Decoder libavcodec/mjpegdec.c ff_mjpeg_decode_sof raw_image_buffer use after free

November 9, 2026 Yanac

A vulnerability was found in FFmpeg up to 9.0.2. It has been rated as critical. This impacts the function ff_mjpeg_decode_sof of the file libavcodec/mjpegdec.c of the component MJPEG Decoder. This manipulation of the argument raw_image_buffer causes use after free.

This vulnerability is handled as CVE-2026-125255. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More