CVE-2026-125257
7 HIGHpublic exploit availablePublished 2026-11-09 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in libavcodec/nellymoserenc.c that allows writing one element past the opt and path allocations. Attackers can supply crafted audio to applications encoding Nellymoser with trellis enabled, causing idx to equal OPT_SIZE and overwrite adjacent heap memory.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-193
Public exploit & PoC references
All references
- https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24471
- https://github.com/FFmpeg/FFmpeg
- https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/nellymoserenc.c#L262
- https://github.com/FFmpeg/FFmpeg/commit/733bec3e19759520ccdbeb6c3c0cae280bbe6dc5
- https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-heap-overflow-via-nellymoser-encoder-trellis-search
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100889
- HIGHCVE-2026-101014PoC
- MEDIUMCVE-2026-101302
- HIGHCVE-2026-102857
- MEDIUMCVE-2026-104033
- MEDIUMCVE-2026-104774PoC
- LOWCVE-2026-106584
- HIGHCVE-2026-108443
Related by shared AI tags and CWE weakness class. Browse the full archive.