https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T01:56:37.093108+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-125191 CVE-2026-125191 — FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak 2026-11-11T01:56:37.095130+00:00

Affected: FFmpeg

FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2_buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. Attackers can supply crafted H.264, HEVC, or VP9 streams with resolution changes, making ff_v4l2_m2m_codec_reinit() wait forever and hang the decoding application.