Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 01:26:44 +0000 CVE-2026-125200 — FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads https://db.gcve.eu/vuln/cve-2026-125200 <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never frees the rpu.payload allocated by ff_dovi_rpu_generate(). Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265 transcoding, causing unbounded memory growth and denial of service.</p> <p><strong>Affected:</strong> FFmpeg</p> <p>FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never frees the rpu.payload allocated by ff_dovi_rpu_generate(). Attackers can supply crafted Dolby Vision HEVC or AV1 files that leak one RPU allocation per encoded frame during libx265 transcoding, causing unbounded memory growth and denial of service.</p> https://db.gcve.eu/vuln/cve-2026-125200