CVE-2026-75142

Name	CVE-2026-75142
Description	FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ffmpeg (PTS)	bookworm, bookworm (security)	7:5.1.9-0+deb12u1	vulnerable
	trixie (security), trixie	7:7.1.5-0+deb13u1	vulnerable
	forky, sid	7:8.1.2-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
ffmpeg	source	(unstable)	(unfixed)

Notes

[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 (master)
Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b274f0d21ba684446fd59b49e00f3f8e9ed954df (n9.0.1)