{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"ffmpeg/ffmpeg","product":"FFmpeg","source":"CNA: VulnCheck","vendor":"FFmpeg","versions":[{"lessThanOrEqual":"9.0.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-125183","cwes":["CWE-834"],"description":"FFmpeg through 9.0.2 contains a denial of service vulnerability in pps_3d_extension() in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. Attackers can supply crafted HEVC files with repeated PPS NAL units that trigger hundreds of millions of bit skips, stalling decoders, parsers, and ffprobe.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.8,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":5.5,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794258418037,"publishedAt":1794251468195,"references":[{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25572"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/FFmpeg/FFmpeg/commit/f9f732b444a2fc27dcc4fe52084d3d435f827864"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/hevc/ps.c#L1963"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://github.com/FFmpeg/FFmpeg"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-denial-of-service-via-hevc-pps-3d-extension-parsing"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/FFmpeg/FFmpeg/commit/f9f732b444a2fc27dcc4fe52084d3d435f827864"}],"revision":"5f0eb819fb83b338d730d4183abd11c23ebf9d87784a5cc5606e75f19c2b4b37","sources":[{"modifiedAt":1794258418037,"name":"CNA: VulnCheck","retrievedAt":1794262190493,"url":"https://www.cve.org/CVERecord?id=CVE-2026-125183"}],"ssvc":{"assessedAt":1794258196271,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing","updatedAt":1794262190493}