{"id":"CVE-2026-125252","published":"2026-11-09T20:18:11.130","lastModified":"2026-11-10T21:46:30.990","description":"FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi_decode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. Attackers can craft H.264 or other VAAPI-decoded video where later slices fail to parse on every frame, continuously leaking VA parameter and slice buffers plus driver and heap memory.","cvssScore":4.7,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwes":["CWE-401"],"vendors":[],"products":[],"references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25231","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/vaapi_decode.c#L117","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/4221a63ce869ade862557ca64693bf77f5032971","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/838c660bb3cd66ba74981b453c14c79214f6ef92","tags":[]},{"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-vaapi-memory-leak-via-abandoned-picture-buffers","tags":[]}],"exploitRefs":[{"url":"https://github.com/FFmpeg/FFmpeg","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/vaapi_decode.c#L117","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/4221a63ce869ade862557ca64693bf77f5032971","tags":[]},{"url":"https://github.com/FFmpeg/FFmpeg/commit/838c660bb3cd66ba74981b453c14c79214f6ef92","tags":[]}],"hasPoc":true,"ai":null}