Threats tagged 'ghsa-9887-9v8v-j28g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.7	CVE-2026-125263FFmpeg 9.0 through 9.0.2 built with liblcevc_dec fails to validate LCEVC enhanced output dimensions against max_pixels Medium5.72026-11-09GCVE DatabaseCVE-2026-125263 FFmpeg versions 9.0 through 9.0.2 built with liblcevc_dec contain a vulnerability where the software fails to validate LCEVC enhanced output dimensions against maximum pixel limits before frame allocation. This flaw allows attackers to supply crafted video streams (H.264, HEVC, or VVC) with large LCEVC resolutions, causing oversized memory allocations that can exhaust system memory. Report on CVE-2026-125263 Vulnerability CWE-789 #ghsa-9887-9v8v-j28g	GCVE Database	2026-11-09

Page 1 of 1