CVE-2026-125102

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in takdecodeframe in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the list, causing undecoded...

CVE-2026-125102

FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory disclosure vulnerability within the tak_decode_frame() function in libavcodec/takdec.c. The root cause is a failure to verify that multichannel decorrelation lists cover every channel. An attacker can provide a crafted multic...

EUVD-2026-120256

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in takdecodeframe in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. Attackers can supply crafted multichannel TAK files omitting channels from the list, causing undecoded...