7 matches found
CVE-2026-125098
FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8lossydecodealpha in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width height to disclose...
EUVD-2026-120252
FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8lossydecodealpha in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width height to disclose...
CVE-2026-125098
FFmpeg versions through 9.0.2 are susceptible to an information disclosure vulnerability within the vp8_lossy_decode_alpha() function in libavcodec/webp.c . The root cause is that the software fails to initialize alpha plane memory for short uncompressed ALPH chunks . An attacker can exploit this...
CVE-2026-125098 FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH Chunk
FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8lossydecodealpha in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width height to disclose...
CVE-2026-125098 FFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH Chunk
FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8lossydecodealpha in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width height to disclose...
CVE-2026-125098: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.cā¦
FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8lossydecodealpha in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. Attackers can supply a crafted WebP image whose ALPH chunk is shorter than width height to disclose...
ffmpeg: Heap-buffer-overflow in vp8_lossy_decode_alpha
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6044604124102656 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDWEBPfuzzer Fuzz target binary: ffmpegAVCODECIDWEBPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cra...