Threats tagged 'ghsa-f527-xpw9-mvpf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.3	CVE-2026-125227FFmpeg through 9.0.2 contains an integer overflow in cbs_jpeg_write_scan() in libavcodec/cbs_jpeg.c that causes a heap High7.32026-11-09GCVE DatabaseCVE-2026-125227 FFmpeg versions up to 9.0.2 have an integer overflow vulnerability in the cbs_jpeg_write_scan() function within libavcodec/cbs_jpeg.c. This flaw can lead to a heap buffer overflow on 32-bit builds when processing crafted MJPEG/JPEG streams with scans of 512 MiB or more via CBS bitstream filters such as filter_units. The vulnerability can cause heap corruption or application crashes. Report on CVE-2026-125227 Vulnerability CWE-190 #ghsa-f527-xpw9-mvpf	GCVE Database	2026-11-09

Page 1 of 1