6 matches found
CVE-2026-125217
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...
CVE-2026-125217
FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory use vulnerability within the roq_dpcm_encode_frame() function in libavcodec/roqaudioenc.c. This flaw occurs when the encoder is flushed early, causing it to encode stale heap contents. An attacker can exploit this by providin...
CVE-2026-125217 FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...
CVE-2026-125217 FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...
CVE-2026-125217: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in…
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roqdpcmencodeframe in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized uninitialized...
PT-2026-141045
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq dpcm encode frame in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. Attackers can supply short audio streams under eight frames for RoQ DPCM transcoding, causing DPCM-quantized...