CVE-2026-125250 – FFmpeg through 9.0.2 GIF Encoder Heap Buffer Overflow via shrunk_buf Remap

​CVE ID :CVE-2026-125250

Published : Nov. 9, 2026, 7:17 p.m. | 1 hour, 11 minutes ago

Description :FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder’s gif_image_write_image() in libavcodec/gif.c because shrunk_buf is sized from the first frame’s linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, causing remap_frame_to_palette() to write past shrunk_buf and corrupt the heap during GIF transcoding.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More