6.8
Moyenne
CVE-2026-120244 FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers…
Description
FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data ends early, causing pcx_decode_frame() to copy uninitialized av_malloc() buffer contents into visible decoded pixels.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FFMPEG 2.1 | 2.1 → 9.0.2 | Pas de correctif indiqué |
Références
- code.ffmpeg.org code.ffmpeg.org
- github.com github.com
- github.com github.com
- github.com github.com
- VulnCheck Advisory: FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FFMPEG
Les 83 CVE de FFMPEG →
CVE-2026-120247
FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows…
6.8
Moyenne
CVE-2026-120246
FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder
6.8
Moyenne
CVE-2026-120245
FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks…
6.8
Moyenne
CVE-2026-120243
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows…
6.8
Moyenne