CVE-2026-125243

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125243 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS Decoder

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125243 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS Decoder

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125243

FFmpeg versions through 9.0.2 are affected by an uninitialized memory disclosure vulnerability in the ff_jpegls_decode_picture() function located in libavcodec/jpeglsdec.c. The issue occurs when the decoder handles 16-bit line-interleaved JPEG-LS scans but decodes them as 8-bit samples. An attack...

EUVD-2026-120193

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125243: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in…

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

PT-2026-141071

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff jpegls decode picture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1,...