PT-2026-140988
CVE-2026-125095
·
تاريخ النشر
2026-11-09
·
تاريخ التحديث
2026-11-09
الوصف من
CVSS 3.1
3.3
منخفضةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c, where decode frame() never checks how many color table bytes were copied. Attackers can supply a crafted truncated Interplay C93 file so draw n color() writes uninitialized stack bytes into decoded frames, disclosing stack memory contents.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾