Medium severity5.5NVD Advisory· Published Nov 9, 2026
CVE-2026-125234
CVE-2026-125234
Description
FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpack_encode_init() in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. Attackers can supply a crafted audio file, such as a WAV header declaring a huge sample rate with many channels, to hang applications transcoding to WavPack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
4- code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25694nvd
- github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/wavpackenc.cnvd
- github.com/FFmpeg/FFmpeg/commit/e621da8ecdbef8edb8336cc899b962159dc2465cnvd
- www.vulncheck.com/advisories/ffmpeg-through-9.0.2-wavpack-encoder-integer-overflow-infinite-loop-via-wavpack-encode-initnvd
News mentions
0No linked articles in our index yet.