Bug 2570041 (CVE-2026-125227) - CVE-2026-125227 ffmpeg: FFmpeg: Heap buffer overflow via integer overflow in JPEG bitstream parsing
Summary: CVE-2026-125227 ffmpeg: FFmpeg: Heap buffer overflow via integer overflow in ...
Keywords:
Status: NEW
Alias: CVE-2026-125227
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-10 19:32 UTC by OSIDB Bzimport
Modified: 2026-11-10 20:43 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-10 19:32:34 UTC 
FFmpeg through 9.0.2 contains an integer overflow in cbs_jpeg_write_scan() in libavcodec/cbs_jpeg.c that causes a heap buffer overflow on 32-bit builds. Attackers can supply a crafted MJPEG/JPEG stream with a scan of 512 MiB or more, processed by CBS bitstream filters like filter_units, to corrupt the heap or crash the application.
Note You need to log in before you can comment on or make changes to this bug.