{"id":"CVE-2026-125221","published":"2026-11-09T19:16:59.493","lastModified":"2026-11-10T21:46:33.890","description":"FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score_header() in libavcodec/flac_parser.c that allows attackers to exhaust the thread stack via crafted FLAC input. Attackers can supply a FLAC stream packed with many small valid-looking frame headers, forcing deep recursion that crashes the process during demuxing or parsing.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwes":["CWE-674"],"vendors":[],"products":[],"references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25569","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/flac_parser.c#L603","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/972fe1ccd326538fe9a6b5d5094b7880b5443429","tags":[]},{"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uncontrolled-recursion-in-flac-parser-score-header","tags":[]}],"exploitRefs":[{"url":"https://github.com/FFmpeg/FFmpeg","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/flac_parser.c#L603","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/972fe1ccd326538fe9a6b5d5094b7880b5443429","tags":[]}],"hasPoc":true,"ai":null}