Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2026/11/09 7:11 p.m.•22 views

CVE-2026-125177 FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via MSCC/SRGC Decoder

FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. Attackers can craft an MSCC or SRGC stream, such as in AVI, whose RLE data terminates early so the decoded frame...

4.8CVSS0.00128EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/11/09 7:11 p.m.•9 views

CVE-2026-125177 FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via MSCC/SRGC Decoder

FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. Attackers can craft an MSCC or SRGC stream, such as in AVI, whose RLE data terminates early so the decoded frame...

4.8CVSS6AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/11/09 7:11 p.m.•5 views

EUVD-2026-120266

FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. Attackers can craft an MSCC or SRGC stream, such as in AVI, whose RLE data terminates early so the decoded frame...

4.8CVSS6AI score0.00128EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/09 12:00 a.m.•5 views

CVE-2026-125177: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c…

FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. Attackers can craft an MSCC or SRGC stream, such as in AVI, whose RLE data terminates early so the decoded frame...

4.8CVSS6AI score0.00128EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/09 12:00 a.m.•5 views

PT-2026-141005

FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. Attackers can craft an MSCC or SRGC stream, such as in AVI, whose RLE data terminates early so the decoded frame...

3.3CVSS6AI score0.00128EPSS
SaveExploits0References6
Rows per page
Query Builder