{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"ffmpeg/ffmpeg","product":"FFmpeg","source":"CNA: VulnCheck","vendor":"FFmpeg","versions":[{"lessThanOrEqual":"9.0.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-125198","cwes":["CWE-401"],"description":"FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). Attackers can supply crafted media files with large extradata, leaking native memory on each MediaCodec decoder configuration in Android applications and causing resource exhaustion.","epss":{"date":"2026-11-12","percentile":0.01815,"score":0.0012},"exploits":[],"kev":null,"metrics":[{"score":2,"severity":"low","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":2.5,"severity":"low","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","version":"3.1"},{"score":2,"severity":"low","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":2.5,"severity":"low","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794574217888,"publishedAt":1794251478674,"references":[{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22550"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/FFmpeg/FFmpeg/commit/e5d295b3cd467fc713300e208ba2dacc7ff603a0"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/mediacodec_wrapper.c#L1134"},{"source":"CNA: VulnCheck","tags":["product"],"url":"https://github.com/FFmpeg/FFmpeg"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-memory-leak-via-mediacodec-jni-setbuffer"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22550"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/FFmpeg/FFmpeg"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/mediacodec_wrapper.c#L1134"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/FFmpeg/FFmpeg/commit/e5d295b3cd467fc713300e208ba2dacc7ff603a0"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-memory-leak-via-mediacodec-jni-setbuffer"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/FFmpeg/FFmpeg/commit/e5d295b3cd467fc713300e208ba2dacc7ff603a0"}],"revision":"c9261dadb23043c709ceebe9b34afb1649c66626d2a6bfbc2e32a7a543dfe32d","sources":[{"modifiedAt":1794574217888,"name":"CNA: VulnCheck","retrievedAt":1794575347213,"url":"https://www.cve.org/CVERecord?id=CVE-2026-125198"},{"modifiedAt":1794347190177,"name":"NVD","retrievedAt":1794356415124,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125198"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794550559795,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-125198"}],"ssvc":{"assessedAt":1794574198228,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"FFmpeg through 9.0.2 Memory Leak via MediaCodec JNI setBuffer","updatedAt":1794575347213}