https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T02:01:30.581854+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125225 CVE-2026-125225 — FFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream Filter 2026-11-11T02:01:30.583467+00:00

Affected: FFmpeg

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in aac_adtstoasc_filter() that allows attackers to crash applications via oversized ADTS AAC packets. Attackers can supply a crafted file with a packet over 256 MB, overflowing the bit count so init_get_bits() fails unchecked and get_bits() crashes during MP4, Matroska, FLV or LATM remuxing.