CVE-2026-125241
Received Received - Intake

Heap Buffer Overflow in FFmpeg via FLIC File

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: VulnCheck

Description
FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to write out of bounds because check_pixel_ptr() checks only one bound with negative-stride frames. Attackers can supply a crafted FLIC file whose RLE and delta chunks write pixel data past frame storage, corrupting heap memory to crash applications or possibly execute code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-125241
EUVD
EUVD-2026-120191

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FFmpeg FFmpeg From 0 (inc) to 9.0.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a heap buffer overflow in FFmpeg through version 9.0.2. It occurs in the FLIC video decoder (libavcodec/flicvideo.c) where the check_pixel_ptr() function fails to validate both ends of frame storage for negative-stride frames. Attackers can exploit this by crafting malicious FLIC files with RLE or delta chunks that write pixel data past allocated memory, causing heap corruption. This may crash applications or potentially allow arbitrary code execution.

Detection Guidance

To detect this vulnerability, monitor FFmpeg processes for crashes when handling FLIC files. Use tools like AddressSanitizer (ASAN) during compilation to identify heap buffer overflows. Check FFmpeg version against 9.0.2 or earlier. Scan network traffic for suspicious FLIC file transfers.

Impact Analysis

If you process untrusted FLIC video files with vulnerable FFmpeg versions, this flaw could crash your application or allow attackers to execute arbitrary code on your system. This is especially risky for applications that handle media files from untrusted sources, such as web browsers, media players, or video processing tools.

Mitigation Strategies

Upgrade FFmpeg to a patched version beyond 9.0.2. Avoid processing untrusted FLIC files. Implement input validation for file formats. Use sandboxing for FFmpeg processes to limit damage from exploits.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-125241. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...