Bug 2569879 (CVE-2026-125265) - CVE-2026-125265 ffmpeg: ffmpeg: Denial of Service via use-after-free in NVDEC
Summary: CVE-2026-125265 ffmpeg: ffmpeg: Denial of Service via use-after-free in NVDEC
Keywords:
Status: NEW
Alias: CVE-2026-125265
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-10 19:21 UTC by OSIDB Bzimport
Modified: 2026-11-10 19:53 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-10 19:21:30 UTC 
FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails to reset ctx->bitstream after slice errors. Attackers can supply crafted video that abandons a picture before end_frame, causing cuvidDecodePicture() to read freed heap memory, crashing applications or exposing stale heap contents.
Note You need to log in before you can comment on or make changes to this bug.