6 matches found
CVE-2026-125176
FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decodehybrid in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. Attackers can supply a crafted Flash Screen Video 2 block whose inflated data ends mid-pixel to leak heap memory in...
CVE-2026-125176 FFmpeg through 9.0.2 Uninitialized Memory Read in Flash Screen Video 2 Decoder
FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decodehybrid in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. Attackers can supply a crafted Flash Screen Video 2 block whose inflated data ends mid-pixel to leak heap memory in...
CVE-2026-125176
FFmpeg versions through 9.0.2 are vulnerable to an uninitialized memory read vulnerability in the decode_hybrid() function within libavcodec/flashsv.c. This issue occurs when the decoder processes 15-bit color pixels ; specifically, a crafted Flash Screen Video 2 block with inflated data ending m...
CVE-2026-125176 FFmpeg through 9.0.2 Uninitialized Memory Read in Flash Screen Video 2 Decoder
FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decodehybrid in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. Attackers can supply a crafted Flash Screen Video 2 block whose inflated data ends mid-pixel to leak heap memory in...
EUVD-2026-120265
FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decodehybrid in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. Attackers can supply a crafted Flash Screen Video 2 block whose inflated data ends mid-pixel to leak heap memory in...
CVE-2026-125176: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decode_hybrid() in libavcodec/flashsv.cā¦
FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decodehybrid in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. Attackers can supply a crafted Flash Screen Video 2 block whose inflated data ends mid-pixel to leak heap memory in...