PT-2026-134684
CVE-2026-120243
·
Published
2026-11-01
·
Updated
2026-11-01
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
FFmpeg versions 2.0 through 9.0.2
Description
The Go2Meeting decoder contains an issue where an uninitialized variable is used, allowing attackers to leak stack memory via out-of-range palette indices. By crafting a G2M3/G2M4 stream with a short Kempf palette, the
kempf restore buf() function may copy uninitialized stack bytes, such as pointers or stack guards, into the decoded output.Recommendations
Update FFmpeg to a version later than 9.0.2.
Found an issue in the description? Have something to add? Feel free to write us 👾