The vulnerability of the decode_move() function in the libavcodec/rasc.c file of the multimedia library FFmpeg allows a attacker to cause a service failure.

The vulnerability of the decodemove function in the libavcodec/rasc.c file of the multimedia library FFmpeg is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-12706: Use After Free

A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decodemove function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by...

ffmpeg/ffmpeg_AV_CODEC_ID_RASC_fuzzer: Heap-buffer-overflow in decode_move

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4856330905452544 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDRASCfuzzer Fuzz target binary: ffmpegAVCODECIDRASCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...