https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T03:10:38.362808+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125265 CVE-2026-125265 — FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer 2026-11-11T03:10:38.364466+00:00

Affected: FFmpeg

FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails to reset ctx->bitstream after slice errors. Attackers can supply crafted video that abandons a picture before end_frame, causing cuvidDecodePicture() to read freed heap memory, crashing applications or exposing stale heap contents.