{"id":"CVE-2026-125232","aliases":[],"cve":{"records":[{"id":"CVE-2026-125232","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-09T18:15:23.607Z","published":"2026-11-09T19:11:43.710Z","modified":"2026-11-09T21:06:54.183Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-09T19:11:43.710Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T21:06:54.183Z"}],"references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24552","tags":["issue-tracking"],"source":"VulnCheck"},{"url":"https://github.com/FFmpeg/FFmpeg/commit/bf0a2e4680df92d8de6514090d350152eb7845b8","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/FFmpeg/FFmpeg/commit/16d19ccbce802634662a9bf18a5679cf27da2848","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/motion_est.c#L1153","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://github.com/FFmpeg/FFmpeg","tags":["product"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-division-by-zero-in-b-frame-motion-estimation","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-369","description":"Divide By Zero","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.2"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T20:57:41.697888Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"FFmpeg through 9.0.2 Division by Zero in B-frame Motion Estimation","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"FFmpeg through 9.0.2 contains a division by zero vulnerability in estimate_motion_b() in libavcodec/motion_est.c, caused by frame timestamp distances truncated to 16 bits. Attackers can supply input with timestamp gaps that are multiples of 65536, crashing MPEG-4 Part 2 or MPEG-1/2 B-frame encoding with SIGFPE.","score":6.8,"severity":"medium","published":"2026-11-09T19:11:43.710Z","modified":"2026-11-09T21:06:54.183Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"FFmpeg","name":"FFmpeg","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"9.0.2","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:github/ffmpeg/ffmpeg","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-125232"}],"remediation":[],"references":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24552","https://github.com/FFmpeg/FFmpeg/commit/bf0a2e4680df92d8de6514090d350152eb7845b8","https://github.com/FFmpeg/FFmpeg/commit/16d19ccbce802634662a9bf18a5679cf27da2848","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavcodec/motion_est.c#L1153","https://github.com/FFmpeg/FFmpeg","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-division-by-zero-in-b-frame-motion-estimation"],"sources":[{"name":"CVE","id":"CVE-2026-125232","modified":"2026-11-09T21:06:54.183Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-125232"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","score":6.8},{"source":"VulnCheck","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","score":5.5}],"sourceAffected":[],"observedAt":"2026-11-09T21:17:09.235Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:10:30.655Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-10T02:40:35.788Z","attemptedAt":"2026-11-10T02:40:35.788Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-10T02:40:34.534Z","attemptedAt":"2026-11-10T02:40:34.534Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-10T02:40:32.881Z","attemptedAt":"2026-11-10T02:40:32.881Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T02:40:34.524Z","attemptedAt":"2026-11-10T02:40:34.524Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-120182","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-120182","modified":"Nov 9, 2026, 9:06:54 PM","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-10T02:40:32.881Z"},{"source":"GitHub Advisory Database","id":"GHSA-3242-hx2p-rmrh","url":"https://github.com/advisories/GHSA-3242-hx2p-rmrh","modified":"2026-11-09T21:32:06Z","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","checkedAt":"2026-11-10T02:40:34.534Z"},{"source":"NVD","id":"CVE-2026-125232","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125232","modified":"2026-11-09T22:18:45.867","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-10T02:40:35.788Z"},{"source":"NVD","id":"CVE-2026-125232","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125232","modified":"2026-11-09T22:18:45.867","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","checkedAt":"2026-11-10T02:40:35.788Z"}],"aiSummary":{"text":"FFmpeg through 9.0.2 has a division by zero vulnerability in B-frame motion estimation, caused by truncated frame timestamp distances, allowing attackers to crash encoding with SIGFPE. The vulnerability is triggered by input with specific timestamp gaps. Affected versions are 9.0.2 and below.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T19:41:08.408Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-125232"}]}}